You are not logged in.

Monday, September 1st 2014, 9:29am

The Avira Forum will be moved to the new platform Avira Answers soon. We'll make the transition of existing user profiles and threads as smooth as possible.
New visitors are able to log in on Avira Answers with the existing Avira account directly or sign up with a new account.

  • "tsmith35" started this thread

Date of registration:
Apr 15th 2010

  • Send private message

1

Friday, October 25th 2013, 1:09am

Does Avira detect Cryptolocker?

I see where Cryptolocker is causing a lot of heartache by effectively encrypting all of the document files accessible by an infected computer. The encryption is extremely effective, and the only known solution once said encryption occurs is to pay $300 to the software authors.

Does Avira detect and block Cryptolocker from executing? I've already checked and found that MBAM Pro will stop it, but I'd like to know if Avira will do the same.

This post has been edited 1 times, last edit by "tsmith35" (Oct 25th 2013, 1:13am)


Date of registration:
Nov 26th 2010

Version:
Avira Antivirus Suite

Operating System:
Windows 7 Home Premium 64-bit

  • Send private message

2

Monday, October 28th 2013, 12:15pm

This is a very good question!
I am surprised that non of the moderators
is taking a moment to respond on it. X(

avon

Community member

Date of registration:
Apr 15th 2008

Version:
Avira Antivirus Suite

Operating System:
Windows 8.1U1 Pro 32-bit Windows XP Home SP3 32-bit

  • Send private message

3

Monday, October 28th 2013, 3:23pm

Does Avira detect and block Cryptolocker from executing?

Most antivirus programs have updated their AV engines and are now detecting this ransomware trojan but they cannot recover the encrypted files. For example, Avast detects it as Win32:Ransom-AQH [Trj]. AVG - Ransomer.CEL. Avira - TR/Fraud.Gen2. Detection ration is 38/48. See CryptoLocker analysis on VirusTotal for more details.
http://deletemalware.blogspot.gr/2013/10…nd-restore.html

TR/Fraud.Gen2
http://www.avira.com/en/support-threats-…d/5670/tlang/en

CryptoLocker analysis on VirusTotal
https://www.virustotal.com/en/file/d765e…93bb9/analysis/

avon

Community member

Date of registration:
Apr 15th 2008

Version:
Avira Antivirus Suite

Operating System:
Windows 8.1U1 Pro 32-bit Windows XP Home SP3 32-bit

  • Send private message

4

Thursday, November 7th 2013, 10:55pm

Quoted

Ransomware in the wild: the CryptoLocker malware
November 7, 2013

http://techblog.avira.com/2013/11/07/ran…ker-malware/en/

Detection:
The good news is that Cryptolocker is not a virus (self-replicating malware), it is a trojan which means that it can’t spread uncontrollable in your network. Its purpose is to encrypt files and demand payment for the decryption. Each user has to receive and activate the malware individually.

The bad news is, that it performs its malicious actions silently (encrypts your files) and only afterwards it communicates that it is present on the affected machine.

All Avira products detect this malware as „TR/Fraud.Gen2″.

What to do if you are infected?
We strongly recommend to run a system scan using the Avira Rescue System which prevents any malware to actively affect the scan results.