Endpoint Protection

Hello Guys,

 

Can SEP version 12.1.4 detect/block the following ransomware and its Variant?

Xorist, CrytorBit, and CryptoLocker

 

Thanks in advance!

See mick2009 comments and articles Every day brings new variants of cryptolockers- keep AV, IPS and other protection up-to-date. Keep browsers and browser plugins patched. These resources might help: See some of mick2009 good articles Recovering Ransomlocked Files Using Built-In Windows Tools https://www-secure.symantec.com/connect/articles/recovering-ransomlocked-files-using-built-windows-tools https://www-secure.symantec.com/connect/articles/day-after-necessary-steps-after-virus-outbreak https://www-secure.symantec.com/connect/articles/two-reasons-why-ips-must-have-your-network Additional information about Ransomware threats Article:TECH211589|Created: 2013-10-16|Updated: 2014-01-09|Article URL http://www.symantec.com/docs/TECH211589 If symantec not detect please submit sample to Security Response . For details please see below articles https://www-secure.symantec.com/connect/articles/symantec-insider-tip-successful-submissions

Hi,

Every organization uses different naming conventions to detect new threats.

Ransomware is a problem that has been with us for several years, Trojan.Ransomlock is not a detection for one single threat, or variants of one single threat. It is the detection name for a full class of malware - one that has become increasingly common the past several years. With new Ransomware malware discovered on a daily basis, end-user education is an important part of the protection. The videos and other resources below are aimed to help users recognize this set of threats.

Video: Ransomware – A Growing Menace

http://www.symantec.com/tv/products/details.jsp?vid=1954285164001

Symantec provides a set of removal instructions that can help to remove these threats. We have also published a whitepaper that describes, in more detail, the recent developments in the ransomware threat.

 

Hi PaulSymEP,

Lots of good advice is above.  Also see:

https://www-secure.symantec.com/connect/forums/cryptolockercryptodefense-defenses

 

With best regards,

Mick

Thank you all, for the response all reply helps me. thanks!

 

*close

Glad to assist! &: )

When time allows, can you mark this thread as "solved"? (It still says "needs solution.")  Solved threads are indexed in searches- a future admin with the same question might them search and benefit from the information here.

All the best,

Mick