[clamav-users] Protection from cryptowall/cryptolocker

[Steve Basford]

On Tue, December 23, 2014 6:35 pm, Alex Regan wrote:

> I'd appreciate any further documents or other methods of protection that
> people are using to block these?

ClamAV and Sanesecurity signatures will help block malware which is
emailed in, which can then download exploit packs, some of which contain
CrytoWall etc.

Sanesecurity sigs are here:

http://sanesecurity.com/foxhole-databases/
http://sanesecurity.com/usage/signatures/

Sanesecurity blog with current malware being seen...

http://sanesecurity.blogspot.co.uk/

You might also want to sort out windows users with group policy type
stuff or something like this (Windows):

CryptoPrevent:
https://www.foolishit.com/vb6-projects/cryptoprevent/technical-information/

These are worth looking at...

http://labs.bitdefender.com/2014/12/bitdefender-offers-free-cryptowall-vaccine/

http://www.surfright.nl/en/cryptoguard

Cheers,

Steve
Web: Sanesecurity.com
Blog: sanesecurity.blogspot.co.uk