A new infection is making its rounds that makes it so you cannot boot your computer unless you pay a ransom of $100 USD. This malware will modify the Master Boot Record of your computer so that it displays a message stating that your computer's hard drives were encrypted and that unless you pay the ransom you will not be able to access your files.
The reality is that the infected hard drives are not actually encrypted, but just not being made available until you enter a password. When this infection is installed on your computer it will move the infected hard drives Master Boot Record, or MBR, to another location and install a new MBR that displays a message stating that the hard drives were encrypted and that you need to visit www.safe-data.ru in order to receive help. (An MBR is a Master Boot Record which in laymen terms is a file dictates how the Operating System boots) The message that you will see is:
Your PC is blocked.
All the hard drives were encrypted.
Browse www.safe-data.ru to get an access to your system and files.
Any attempt to restore the drives using other way will lead to inevitable data loss !!!
Please remember Your ID: , with its
help your sign-on password will be generated.
Enter password:
When you visit www.safe-data.ru it will state that your hard drives are encrypted and unless you spend $100 USD, you will lose your data. It also states that any attempts at tampering may cause loss of data.
The truth is that this infection can be fixed without spending any money, so for no reason should you purchase the code. Instead, if you are infected with this malware, contact a Daedalus Tek or we will provide removal information in our forum area soon.
Thank you,
Ces Garcia
