Endpoint Protection

 View Only

  • 1.  MISCHA RANSOMWARE

    Posted May 27, 2016 09:14 AM

    Hi Team,

    One of our computer is infected with MISCHA RANSOMWARE! (Sophos alias). What is the Symantec alias for this threat.

     

     



  • 2.  RE: MISCHA RANSOMWARE

    Posted May 27, 2016 09:36 AM

    It would fall under the Cryptolocker signature detection but each AV company uses a different naming convention.

    Best bet is to submit to symantec

    https://www.symantec.com/security_response/submitsamples.jsp

    Submit to virustotal as well

    https://www.virustotal.com/



  • 3.  RE: MISCHA RANSOMWARE
    Best Answer

    Posted May 27, 2016 10:02 AM

    Hi Jagada,

    Thanks for the post.  Known samples are detected as Trojan.Cryptolocker.AP (https://www.symantec.com/security_response/writeup.jsp?docid=2016-051613-5427-99)

    This article may be of interest:


    Ransomware protection and removal with Symantec Endpoint Protection
    http://www.symantec.com/docs/HOWTO124710
     

    Please do mark this thread solved if you have received your answer!

    With thanks and best regards,

    Mick



  • 4.  RE: MISCHA RANSOMWARE

    Posted May 27, 2016 10:31 AM

    Thanks Mick