The grugq: PetyaWrap causing lots of havoc, making little profit

Topic

New Reply

Dan Goodin at Ars Technica has the definitive report on the latest ransomware outbreak: A new ransomware attack similar to last month’s self-replicati
[See the full post at: The grugq: PetyaWrap causing lots of havoc, making little profit]

3 users thanked author for this post.

wdburt1, HiFlyer, MrBrian

Reply | Quote

Replies

Fully patched computers in corporate networks can apparently also get this malware from another infected computer in the same corporate network because this malware also uses credential theft to spread within a corporate network. Reference: https://notawfulsecurity.blogspot.ca/2017/06/petya-good-practices-final-exam.html.

1 user thanked author for this post.

HiFlyer

Reply | Quote

The linked article at bleepingcomputer has a batch file that creates c:\windows\perfc c:\windows\perfc.dat and c:\windows\perfc.dll

On my computer Kaspersky deletes perfc.dat after a couple of seconds, but leaves the other two.  The antivirus software removing the vaccine

1 user thanked author for this post.

HiFlyer

Reply | Quote

Well, I’ve done the perfc thing, and now my National Weather Service links will not accept another location for reviewing the local weather. Can’t say for sure this is a direct result, but clicking on the zip code or city name and state worked a half hour before.

Any ideas?

jimz

jimzdoats

Reply | Quote

Patch your machine and do not implement tweaks which you don’t fully understand.

2 users thanked author for this post.

Jim VS, PKCano

Reply | Quote

What, and lose my sense of adventure?

jimzdoats

Reply | Quote

Then keep on experimenting

Reply | Quote

Jim VS wrote:

Well, I’ve done the perfc thing, and now my National Weather Service links will not accept another location for reviewing the local weather. Can’t say for sure this is a direct result, but clicking on the zip code or city name and state worked a half hour before. Any ideas?

This looks like it’s a National Weather Service bug. My National Weather Service link won’t accept another location either and I haven’t done the perfc thing or installed any of the June patches.

3 users thanked author for this post.

SueW, HiFlyer, PKCano

Reply | Quote

Agree with Alice.  I just tried another location in National Weather Service (weather.gov) and got this: “No results found. Please try a different search string.”

Win 7 SP1 Home Premium 64-bit; Office 2010; Group B (SaS); Former 'Tech Weenie'

Reply | Quote

UPDATE: The National Weather Service has fixed the bug.

1 user thanked author for this post.

Jim VS

Reply | Quote