[Locky]

hxxp://www.lemondeinformatique.fr/actualites/lire-des-chercheurs-retrouvent-une-parade-contre-cryptoxxx-64828.html

[Locky]

i've not ask for this...w

why don't you answer correctly ? :/
block execution of temp .exe isn't a right solution for sur

create a partition for 300 computer ??

so i've just ask how to block creation of .locky files (block this extention in HIPS eset rules) because it does't do what i add

[Locky]

ok thanks

but how to block locky file creation ?

if i block this registry key, locky is totaly blocked ?

[.locky]

is it possible because Stormshield Endpoint Security block locky

[Locky]

i don't speak about HKCU\Software\locky
but about .locky files (second screen capture)
 

[Locky]

i want to block/disable .locky files creation/rename

like this :
hxxp://www.netstaff.fr/blog/?p=768

[Locky]

yes, i've test many rules, nothing work

is there anyone that could make it work ?

[Locky]

i've already the latest version/definitions for sure

my eset config is ok

my question is : why when i ask eset (in hips) to block files it doesn't work

[Locky]

HI,

how to block process that create .locky files

HIPS seems not working for this

thanks

[External IP and User Name]

hi,

i have the same problem

column "computer's name" isn't here anymore

same problem in exports...

it take just one minute to add this

thanks