Jump to content

Preventing Cryptowall with Malwarebytes' soft


Recommended Posts

Not to hijack this thread, but is there a good post with talk about *preventing* Cryptowall in the first place? Is Malwarebytes Anti-Exploit Premium a more effective program at preventing Cryptowall than Malwarebytes Anti-Malware? This Cryptowall baloney has got to stop. Please move my post to another area if this is not where it should be. Thank you.

Moved from Malware Help area to the more appropriate one

Edited by Naathim
Post moved
Link to post
Share on other sites

Hi:

 

Malwarebytes Free cannot "protect" against anything -- it is only a manual, on-demand scanner that can detect and remove threats that have already made it on to the computer, past MBAM and the AV.
Malwarebytes Premium provides real-time protection, to help prevent infection in the first place, alongside a robust AV.
See here
 
As far as your specific question about Cryptowall, I will defer to the staff and forum experts.
(There are a number of specific, 3rd-party apps that deal with this particular threat.)

 

Thank you,

Link to post
Share on other sites

Hi:

 

Actually, as you didn't specify MBAM Free or MBAM Premium, it wasn't entirely clear which version you were asking about. :)

 

Having said that:

While no one security product can protect against 100% of the ever-changing malware variants in the wild, MBAM Premium does protect against Cryptowall malware.

See here: https://forums.malwarebytes.org/index.php?/topic/158938-cryptowall-2-does-mbam-premium-block-stop-this-malware-in-real-time-from-encrypting-files/

 

David H Lipman, or another forum expert or staff member will correct me if I am wrong....

AFAIK Cryptowall is not an exploit, so I don't think that MBAE will protect against that particular malware threat.

But there is a dedicated "Questions" section for MBAE >>here<<. :)

 

Cheers,

Link to post
Share on other sites

Hello, 

 

CryptoWall 3.0 appears to be spread in a manner similar to that of CryptoWall 2.0 and other file encrypting ransomware. Namely, bundled with other malware (Zbot, Poweliks, etc) and malicious executable (.exe) files masquerading as legitimate Email attachments. This is done by using the double file extension trick to socially engineer victims into thinking they are opening a .pdf, .docx file, etc. 

 

Zbot, Poweliks and other malware known to download file encrypting ransomware often infect a machine with the use of some form of exploit.

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.