TEMASOFT Ranstop detects and stops this variant in around 5 seconds, time in which the ransomware managed to encrypt over more than 150 files on the local hard drive.
At this rate, an entire system may be compromised between 10 minutes and half an hour.
Upon execution of the .js file, a “.doc” file is created and opened. This document contains a macro that launches embedded executables which will do the actual encryption. As soon as the malware is detected and stopped, the executables involved are being quarantined, and an incident is logged into the TEMASOFT Ranstop Console. At the same time, the compromised files are being restored to their original location.
TEMASOFT Ranstop managed to stop RAA in a matter of seconds and restore all the damaged files automatically.
About TEMASOFT Ranstop
TEMASOFT Ranstop is an anti-ransomware software that detects present and future ransomware, based on file access pattern analysis with a high degree of accuracy. At the same time, it protects user files so that they can be restored in case of malware attacks or accidental loss.
For more information, follow us on social media and subscribe to our newsletter.