Forum for analysis and discussion about malware.
- Posts: 9
- Joined: Mon May 13, 2013 12:23 pm
Some more of cryptolocker copycats
You do not have the required permissions to view the files attached to this post.
- Posts: 25
- Joined: Thu Dec 13, 2012 11:32 am
A screen about this sample using the easy way for deleting shadow copy snapshots :
- Posts: 6
- Joined: Wed May 26, 2010 4:25 pm
Any signs that this malware might be able to work around a SRP to prevent VSSADMIN from running? e.g running as SYSTEM or similar?