Re:Reversing the Petya ransomware with constraint solvers
by tfigment on Saturday April 23, 2016 @03:42PM
(#11557086)
Windows Embedded has the Enhanced Write Filter can be enabled to redirect all writes to a disk to memory. You optionally use an admin tool to commit changes on a clean reboot. Many years ago one of our embedded PCs got Conficker from a Service techs laptop. Rebooting the machine was enough to restore it to clean state since nothing was written to disk. Not a solution for everyone but its somewhat similar.
[ Parent
| on HN ]
There are no comments on this comment yet.