Thursday, May 7, 2015

New fast-spreading virus destroys PCs

Okay, it's true: I get a lot from the Kim Komando web site, and you should too. Visit it every day at komando.com.

Today's post here:

"There's dangerous new malware out there called Rombertik that could steal your personal information and destroy your PC. If you try to get rid of it, the malware could trap your computer in an endless reboot cycle.

Rombertik usually infects computers using a malicious file attached to a phishing email. In some cases, this email is designed to look like a message from Microsoft. The malware can steal login credentials and other information you enter into websites.

Rombertik also checks to see if it's being analyzed or if other programs are trying to delete it. If it detects this kind of activity, it will try to delete a file called the Master Boot Record (MBR). This can cause your computer to go into an endless restart cycle when it is turned off and turned back on. The malware also has some other tricks up its sleeve.

One involves writing a byte of data to memory 960 million times to overwhelm analysis tools that try to spot malware by logging system activity.

Since it's extremely difficult to get rid of, the best way to protect yourself from Rombertik is to avoid it altogether. You can do that by knowing how to spot phishing emails so you don't open them. Click here to see a phishing email example and learn more about how to spot them.

And, remember, never open an email attachment from a sender you don't know. It's most likely filled with malicious software that can harm your computer.

If you're computer is infected by Rombertik, you'll likely lose valuable data. If the malware successfully deletes the MBR file on your computer, you will have to reinstall the Windows operating system."

No comments:

Post a Comment