Q: As a businessperson, I'd like to better understand CryptoWall, the malicious program you wrote about (tinyurl.com/z43tzdw) that encrypts files on a PC and holds them for ransom. Is it what computer security firms call an "advanced persistent threat"? After it's downloaded, is it installed on a single PC or can it move from one PC to another? What protection is there against it besides making file backups and running antivirus software?
Gaurav Khanna, Mumbai, India
A: CryptoWall qualifies as an "advanced persistent threat" because it's the latest version of a series of successful ransomware products that include Cryptorbit and CryptoLocker. As of 2014, the latter had been used to attack more than 200,000 computers worldwide, and it collected more than $27 million in ransom during its first two months on the Internet (see tinyurl.com/zefpn86). Last year, the FBI said CryptoWall was responsible for more than $18 million in ransom fees, computer repairs and other costs (see tinyurl.com/p35cpr8).
CryptoWall is even more dangerous than it appears. Besides encrypting files on a PC, it can also encrypt the PC's backup files if they're stored on an attached storage device, such as an external disk drive, a network drive or a cloud storage service (such as Google Drive or Dropbox.)
The good news is that CryptoWall doesn't replicate itself from one PC to another; it must be downloaded. As "Trojan" malware (named for the Trojan Horse), it pretends to be legitimate downloadable software.
The best defense against CryptoWall is to use up-to-date antivirus software, avoid opening unfamiliar e-mail or visiting questionable websites and store PC backup files on a device that's not attached to the PC.
Q: I use a Kindle Fire tablet computer to access the Internet and play games online. When I first got the tablet, I got a single pop-up advertisement between games of solitaire, but lately I get as many as 20. How can I stop these pop-ups?
Carol Grebe, Reading, Pa.