[Samba] CryptoLocker

John Schmerold john@katy.com KatyComputerSystems schmerold2 at gmail.com
Wed Apr 1 12:04:42 MDT 2015

For a CryptoLocker infection to be successful, a few things must be 
occur including:
1) No backup

2) Many files need to be encrypted

Has anyone developed a Samba plugin to prevent successful CryptoLocker 
infections by shutting down Samba when an unusual number of data files 
are modified by a specific workstation?

This type of utility would have many security applications, for example 
employees have been known to fill a 64GB jumpdrive just prior to turning 
in their resignation.

John Schmerold
Katy Computer Systems, Inc
St Louis

More information about the samba mailing list