search for: locky

From: bounces at isc.sans.edu To: sbradcpa at pacbell.net <sbradcpa at pacbell.net> Novel method for slowing down Locky on Samba server using fail2ban https://isc.sans.edu/diary.html?n&storyid=20805 http://www.heise.de/security/artikel/Erpressungs-Trojaner-wie-Locky-aussperren-3120956.html Google Translate version of above: If you teach the Samba server to monitor and write Rename actions, you can start fail2b...

There is malware that names the files .crypt A novel solution here https://isc.sans.edu/diary/Novel+method+for+slowing+down+Locky+on+Samba+server+using+fail2ban/20805 though it seems locky specific I use this non-samba solution in cron.hourly. Pretty awful, but it works for malware that I know about. I have fast drives, so updatedb only takes a few seconds. #!/bin/sh updatedb wait 20 if locate DECRYPT > /tmp/cryptowal...

On 2017-06-19 01:18 PM, Ilia Mirkin wrote: > cat /sys/kernel/debug/dri/0/pstate > > AC (or DC) line shows the current state. > > On Mon, Jun 19, 2017 at 1:00 PM, James <bjlockie at lockie.ca> wrote: >> I have a NVE7 (GK107). >> How do I see the current memory/CPU speed? $ sudo cat /sys/kernel/debug/dri/0/pstate 07: core 324 MHz memory 648 MHz 0a: core 540 MHz

On 2017-06-19 01:38 PM, Ilia Mirkin wrote: > On Mon, Jun 19, 2017 at 1:32 PM, James <bjlockie at lockie.ca> wrote: >> On 2017-06-19 01:18 PM, Ilia Mirkin wrote: >>> cat /sys/kernel/debug/dri/0/pstate >>> >>> AC (or DC) line shows the current state. >>> >>> On Mon, Jun 19, 2017 at 1:00 PM, James <bjlockie at lockie.ca> wrote:

...client to the domain I get the following entries in the log file: Sep 10 13:29:55 linus smbd[17681]: [2002/09/10 13:29:55, 0] smbd/service.c:make_connection(384) Sep 10 13:29:55 linus smbd[17681]: root logged in as admin user (root privileges) Sep 10 13:29:56 linus useradd[17682]: new user: name=locky$, uid=613, gid=100, home=/dev/null, shell=/bin/false Sep 10 13:29:56 linus smbd[17681]: [2002/09/10 13:29:56, 0] libsmb/smbencrypt.c:decode_pw_buffer(263) Sep 10 13:29:56 linus smbd[17681]: decode_pw_buffer: incorrect password length (-1124875088). Sep 10 13:29:56 linus smbd[17681]: [2002/09/10 1...

...nus smbd[17681]: [2002/09/10 13:29:55, 0] > > > > smbd/service.c:make_connection(384) > > > > Sep 10 13:29:55 linus smbd[17681]: root logged in as admin user > (root > > > > privileges) > > > > Sep 10 13:29:56 linus useradd[17682]: new user: name=locky$, uid=613, > > > > gid=100, home=/dev/null, shell=/bin/false > > > > Sep 10 13:29:56 linus smbd[17681]: [2002/09/10 13:29:56, 0] > > > > libsmb/smbencrypt.c:decode_pw_buffer(263) > > > > Sep 10 13:29:56 linus smbd[17681]: decode_pw_buffer: > >...

Skipped content of type multipart/alternative-------------- next part -------------- A non-text attachment was scrubbed... Name: koutput Type: application/x-java-vm Size: 2881 bytes Desc: not available Url : http://www.winehq.org/pipermail/wine-users/attachments/20021128/a81741b4/koutput.class

On 2018-05-01 06:00 PM, Ilia Mirkin wrote: > What GPU do you have? For video acceleration (i.e. va-api and vdpau), > did you install the necessary firmware? > > On Tue, May 1, 2018 at 5:53 PM, James <bjlockie at lockie.ca> wrote: >> I am playing videos from my lubuntu computer to my tv through the hdmi >> interface on my video card. >> It mostly works. >>

Am 16.05.2016 um 07:32 schrieb ToddAndMargo: > May I surmise that all the encrypted file now have > an extra extension of ".crypt"? So it is easy to > see who got clobbered. how do you come to that conclusion and even if some malware acts that way what makes you sure you can rely on that? IMHO it would only be so when the developer of the ransomware is a fool! why should he

I have a NVE7 (GK107). How do I see the current memory/CPU speed?

On Mon, Jun 19, 2017 at 1:32 PM, James <bjlockie at lockie.ca> wrote: > On 2017-06-19 01:18 PM, Ilia Mirkin wrote: >> cat /sys/kernel/debug/dri/0/pstate >> >> AC (or DC) line shows the current state. >> >> On Mon, Jun 19, 2017 at 1:00 PM, James <bjlockie at lockie.ca> wrote: >>> I have a NVE7 (GK107). >>> How do I see the current

On Tue, May 1, 2018 at 6:16 PM, James <bjlockie at lockie.ca> wrote: > On 2018-05-01 06:00 PM, Ilia Mirkin wrote: >> On Tue, May 1, 2018 at 5:53 PM, James <bjlockie at lockie.ca> wrote: >>> I am playing videos from my lubuntu computer to my tv through the hdmi >>> interface on my video card. >>> It mostly works. >>> Some sound doesn't

On 07/14/10 11:27, Arjen de Korte wrote: > the UPS should power off(and restart when the power comes back Can I set any UPS to only provide power after the battery is charged to a certain level? Or better yet, a certain length on consecutive time when the power has been on. I'd be worried about flapping, where the power goes on and off.

Hello, I am writing a program for windows that makes use of the webcam, and was hoping to easily port this program to Linux using winelib. Does wine support devices such as webcams? I have no previous experience of programming in Linux, so maybe this is throwing myself off the deep-end, but my friend says that just linking to winelib and hitting the ?make? button should ALMOST work in most cases

Can you try something very simple - unplug the cable, and plug it back in, while the TV is on, and set to the HDMI input? That should ensure that the SCDC write can go through at modeset time. You can also force nouveau to avoid any modes that require scrambling by booting with nouveau.hdmimhz=340. Cheers, -ilia On Tue, Aug 6, 2019 at 1:15 PM James <bjlockie at lockie.ca> wrote: >

Was /etc/nut/upssched-cmd automatically installed? I don't have it on my raspberry pi. :-( On 2019-04-03 1:54 p.m., Mike wrote: > I figured this out and it is working now.  This fix seems strange to me > and is possibly a bug.  I'm sharing in case it might help others. > > I had to uncomment all of the NOTIFYFLAG statements whether I was > changing them or not. 

On 05/15/2016 01:00 PM, Andrew Bartlett wrote: > On Sat, 2016-05-14 at 22:42 -0700, ToddAndMargo wrote: >> Hi All, >> >> Is there anything in Samba that will help protect >> against ransomware? > > I've not had to look into this properly, but I would suggest that > regular and genuinely offline backups and regular Read Only snapshots. > > Andrew

On 2018-12-16 8:04 a.m., Charles Lepple wrote: > On Dec 15, 2018, at 10:32 PM, James <bjlockie at lockie.ca> wrote: >> >> My UPS has an LCD that says the battery is 100% and the estimated run time is 12min. >> The uspc has similar results. >> The problem is when line power is lost the UPS batter goes to 0% very quickly (seconds). >> >> It charged to 85%

On 2019-08-06 12:32 p.m., Ilia Mirkin wrote: > Hi James, > > I semi-recently added support for HDMI 2.0 (in 4.20+, so you're good), > which is why you got 60Hz in the first place. In order for the high > rates to work, something called "scrambling" must be enabled. This is > done by 2-party agreement between the sink and the source. The sink > will inform the