Displaying 3 results from an estimated 3 matches for "_locky_recover_instructions".
2016 Mar 10
0
[ISC Crosspost] Novel method for slowing down Locky on Samba server using fail2ban
...d_audit:IP=1.2.3.4|USER=dha|MACHINE=win7dha|VOLUME=dha|pwrite|ok|bla/ganzböserverschlüsselungstrojaner.locky
apt-get install fail2ban
with filter definitions in /etc/fail2ban/filter.d/samba.conf as
[Definition]
failregex = smbd.*\:\ IP=<HOST>\|.*\.locky$
smbd.*\:\ IP=<HOST>\|.*_Locky_recover_instructions\.txt$
ignoreregex =
The jump to the typical Locky files ending .locky and the ransom
_Locky_recover_instructions.tx t on. It can, however, easily extend to
other ransomware typical files. When creating new messages you have to
note the indentation; fail2ban is a Python script and accordingly...
2016 Aug 03
0
Samba 4.2.14 Group Policy (GPO) sync error
...FILES.txt/RECOVERY_FILE.TXT/RECOVERY_FILE*.txt/How
> toRESTORE_FILES.txt/HowtoRestore_FILES.txt/howto_recover_file.txt/restoref
> iles.txt/howrecover+*.txt/_how_recover.txt/recoveryfile*.txt/recoverfile*.
> txt/recoveryfile*.txt/Howto_Restore_FILES.TXT/help_recover_instructions+*.
> txt/_Locky_recover_instructions.txt/
> map archive = No
> map readonly = no
> store dos attributes = Yes
> vfs objects = dfs_samba4 acl_xattr
>
>
>
> Many thanks
> Rainer
> --
> To unsubscribe from this list go to the following URL and read the
> instructi...
2016 Aug 03
3
Samba 4.2.14 Group Policy (GPO) sync error
...SAVE_FILES.txt/RECOVERY_FILES.txt/RECOVERY_FILE.TXT/RECOVERY_FILE*.txt/HowtoRESTORE_FILES.txt/HowtoRestore_FILES.txt/howto_recover_file.txt/restorefiles.txt/howrecover+*.txt/_how_recover.txt/recoveryfile*.txt/recoverfile*.txt/recoveryfile*.txt/Howto_Restore_FILES.TXT/help_recover_instructions+*.txt/_Locky_recover_instructions.txt/
map archive = No
map readonly = no
store dos attributes = Yes
vfs objects = dfs_samba4 acl_xattr
Many thanks
Rainer