RE: IFS share /QIBM and /QIBM/ProdData/OS400/DirSrv -- MIDRANGE-L

× The internal search function is temporarily non-functional. The current search engine is no longer viable and we are researching alternatives.
As a stop gap measure, we are using Google's custom search engine service.
If you know of an easy to use, open source, search engine ... please contact support@midrange.com.

In general I believe you. I would have to be shown otherwise.
Ransomware is different than a virus.
Virus's are stopped because of pattern files.
Ransomware is simply encryption but they do not give you the key to decrypt it without you paying a ransom. Even then, you have to trust the filthy crooks will actually give you the key and their decryption will work. Lots of tales showing this is not always the case.

However just because I don't know how it would be done, doesn't mean it can't be done.

It definitely _can_ be done. Sophos software (PC world) does this. Instead of matching a pattern on the file contents (which it also does for viruses), it matches the pattern of behavior (for ransomware): reading a file, doing intense mathematical formulas, writing back an entirely new version of the file.

Worked for us, until our corporate headquarters replaced the product with a Cisco product. While I prefer the Sophos solution, the Cisco product can also monitor for suspicious heuristics.

_____________________________________________________________________
Spirax-Sarco Engineering Plc. This e-mail has been scanned for viruses by Cisco Cloud Email Security.

This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].

Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.