cryptolocker

[Xstew]

I my reading on the ransomware programs, a concern would be it encrypting the backups. As I understand the process the virus will encrypt your system without any warning and when it is done you get a popup for the ransom. How long is it from infection to the popup? Would a week old backup be safe or do we need a 2-4 week old backup to go to?

[KevinRossen]

I've had experience with the virus. The only way you're safe is if you have backups offsite that are not attached to your server or network. The best course of action is to have three external hard drives that you rotate daily. As long as you don't have two drives attached at the same time you should be ok.

Also, be sure to make sure you don't have any ports open for remote desktop. That's one of the ways the virus gets in. You can check if your network is expose with a free service called Shield's Up. Check it out: https://www.grc.com/ShieldsUP

[satishp]

in a server client architecture, opendental on the server opens up the drive on server to be shared, so client computers can see the images/scans saved on the server.

Anyway this can be prevented by having opendental to remove the requirement to map a network drive on the server, so client can access these files?

[Arna]

There is the option to store images in the database, however that is not practical for most. http://opendental.com/manual/imagesstoreindb.html
Open Dental does not recommend mapped drives. Instead use UNC network paths for Open Dent Images shares. You shouldn't be sharing the whole drive, just the OpenDentImages or OpenDentalData folder.

[Jay]

A solution to consider is to write Group Policies that block such malware. Since this is beyond the scope of most people consider the following FREE product:

https://www.foolishit.com/cryptoprevent ... revention/

Totally free provided even for commercial use you are willing to manually update.

Also consider:

http://www.surfright.nl/en/alert

If you decide to use both and at least you can say you tried your best. Above all train employees not to click suspicious links within emails.

Disclaimer: I have nothing to do with these firms. Use at your own risk.