Strange folders and files appeared on my disk

I’ve noticed an increased number of people asking about strange files and folders appearing on their computer drives. Like this…

cybereason_ransomfree_honeypotfiles

Cybereason_RansomFree_HoneypotFolders.png

These folders and files are named randomly to avoid being targeted or ignored by ransomware writers.

I’ve instantly recognized the pattern with users asking about these “strange” files…

It’s Cybereason’s RansomFree Anti-Ransomware tool, the one I’ve actually wrote about here and I’ve even tested it myself and it’s very effective. You can read more about it here.

Cybereason RansomFree also notifies users about this, but either people click over it quickly or forget about it…

Cybereason_RansomFreeNote.png

These folders and files are called “honeypot” files and they are placed there to trick ransomware into fiddling with them and when ransomware does that, RansomFree pounces on it. Ransomware is captured and you don’t actually lose any of your real documents.

Be aware that if you have such strange files and you haven’t installed Cybereason’s RansomFree or any other security product that uses similar protection mechanism, I suggest thorough scanning of the computer with security software (antivirus).

Advertisements

2 thoughts on “Strange folders and files appeared on my disk

  1. Awesome! I searched for folder names and stuff, after deleting them in several locations and they kept reapearing.. I nearly freaked out, scan this shit with different AVs but no results. Was about to let it check by a well known Anti Trojan board, or format all my boards.

    Today I received an update and thought.. could it.. maybe.. ok let’s google this “cybereason ransomware folder”, plop here I am. 😀

    This helped me alot! Thank you!

    Like

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s