XSolutions IT
  • About ▾
    • About Us
    • Our Process
    • Our Reviews
    • Refer and Earn
  • Solutions ▾
    • Complete Managed IT
    • Co-Managed IT
    • Managed Cybersecurity
    • Backup & Disaster Recovery
    • Cloud Data Protection
  • Industries ▾
    • Law Firms
    • Construction + Trades
    • Distribution + Supply Chain
    • Nonprofits
  • Service Areas▾
    • Rockland County NY
    • Westchester County NY
    • Bergen County NJ
  • Resources ▾
    • Free Resources for Law Firms
    • Free Resources for Construction
    • Free Resources for Distributors
    • Free Resources for Nonprofits
    • Newsletters
    • Blogs
  • Contact
  • 877-807-1332
  • Menu Menu
tablet-interface

Security Alert: Locky Ransomware Is Now THOR

October 27, 2016/in Article/by Joe Imperato, Sr.

Ransomware gangs are at it again. A new Locky ransomware variant now carries the THOR extension. Here’s what you should know:

  • Like Locky, THOR is distributed via SPAM campaigns.
  • Recent emails masquerade as a request to open a “budget forecast” attachment for a soon-to-be-due project.
  • The bogus email carries an infected attachment usually a zip file. The infected file contains a VBS script that starts the attack by downloading a DLL Installer.
  • Once executed, THOR searches for targeted file types, converts the file names into nonsensical descriptions, encrypts the files and attaches the THOR extension.
  • THOR will attempt (and many times, succeed) to delete the Shadow Volume Copies that are used to restore previous file versions in Windows making quick restores impossible.
  • At this time, there is no known decryption tool for the THOR ransomware variant.

The only way to recover from a Locky/THOR ransomware attack (if your Shadow Copies have been deleted) is through your backup system. Keep in mind that data backup systems do not ensure a quick recovery. So, if all you have is a data backup system, you could be in for a long, painful recovery.

The ultimate protection against data loss is a Hybrid-cloud backup solution that provides for:

  1. Instant onsite failover for super-fast, local restores.
  2. Cloud failover to two (2) geographically separated locations for maximum protection and redundancy.
  3. Image capture for fast restores.
  4. Bare Metal Restore capability.
  5. Full management from installation to monitoring to maintenance and finally, restoration.

Don’t become a statistic—plan to stay in business! Call us to upgrade your data backup system to a Hybrid-cloud backup solution now.

XSolutions is an Elite Partner of Datto, the world leader in Hybrid-Cloud Business Continuity solutions whose systems protect 180+ Petabytes of data with over 700 employees around the globe. Call (845) 362-9675 and let us introduce you to the ultimate defense against data loss—whatever the cause.

Tags: data backup, hybrid cloud backup, Locky, malware, Ransomware, THOR, virus
Share this entry
  • Share on Facebook
  • Share on X
  • Share on Pinterest
  • Share on LinkedIn
  • Share on Reddit
  • Share by Mail
https://xsolutions.com/wp-content/uploads/2018/10/tablet-interface.jpg 266 702 Joe Imperato, Sr. https://xsolutions.com/wp-content/uploads/2023/09/XSol-Logo-header-300x138.png Joe Imperato, Sr.2016-10-27 08:00:212026-10-13 12:48:02Security Alert: Locky Ransomware Is Now THOR
You might also like
Scammers contacting Finance Executives Security Alert: New IRS/FBI Ransomware Scam
XSolutions On Security vol 7
GDPR The Reach Is Long And The Bite Deep
Man on laptop Locky Ransomware Diguises Itself Again
hero-watching-over Watch What You Type Into Your Browser!
dinner, meal, glasses Who Can You Trust?
technician with server Test Your Disaster Recovery Plan
wifi-coffee-mobile-devices Security Alert: Ransomware That Encrypts Tax Program Files
Free Checklist

Cybersecurity Checklist

Use this simple checklist to spot common cybersecurity gaps, strengthen your defenses, and start better conversations about protecting your business.

Recent Posts

  • 10 Hidden Technology Problems Costing Your Law Firm Billable Hours
  • Secure File Sharing for Law Firms | Managed IT Support
  • Managed IT Services & Cybersecurity for Law Firms in Rockland County, NY
  • 10 Keyboard Shortcuts Everyone Should Know
  • Why Summer Is a Risky Season for Business Cybersecurity
XSolutions Trademarked LOGO

XSolutions is a managed IT services and cybersecurity company based in New City, NY. Since 1999, we have helped businesses across Rockland County, Bergen County, Westchester County, Orange County, Northern New Jersey, and the greater NY/NJ/CT region reduce risk, improve reliability, and gain clarity over their technology. We specialize in proactive managed IT, cybersecurity, Microsoft 365, cloud, backup and disaster recovery, and strategic IT guidance for organizations with 15 or more computers.

Service Areas

    • Managed IT Nanuet, NY

    • Managed IT New City, NY

    • Managed IT Suffern, NY

    • Managed IT Rockland County

    • Managed IT Orange County

    • Managed IT Westchester County

    • Managed IT Putnam County

    • Managed IT Mahwah, NJ

    • Managed IT Ramsey, NJ

    • Managed IT Bergen County

    • Managed IT Essex County

    • Managed IT Passaic County

    • Managed IT Hudson County

Contact Us

20 Squadron Blvd., STE 320
New City, NY 10956
Sales: 877-807-1332
Support: 845-362-9675

Facebook  LinkedIn Twitter (X) YouTube

 

XSolutions® Consulting Services, LLC All rights reserved © 2026 | Privacy Policy | Sitemap
Link to: Tech Tip: Delete Doesn’t Mean Gone Forever Link to: Tech Tip: Delete Doesn’t Mean Gone Forever Tech Tip: Delete Doesn’t Mean Gone ForeverDelete Key doesn't REALLY delete data Link to: Locky Ransomware Diguises Itself Again Link to: Locky Ransomware Diguises Itself Again Man on laptopLocky Ransomware Diguises Itself Again
Scroll to top Scroll to top Scroll to top
XSolutions IT
This website uses cookies
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}
XSolutions IT
This website uses cookies
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
  • Manage options
  • Manage services
  • Manage {vendor_count} vendors
  • Read more about these purposes
View preferences
  • {title}
  • {title}
  • {title}