CryptoStopper Server

Defense

Always on Protection:

CryptoStopper runs as a service in the background. This provides the always on protection.

service_running.png

Windows Firewall:

CryptoStopper utilizes windows firewall to block malicious hosts, that are infected with ransomware. A firewall rule is automatically created during installation.

cs_windows_firewall-1.png

Shutdown Message:

CryptoStopper sends a remote shutdown command to the infected computer. The below picture is an exmaple of the message that will appear to the user.

ransomware_detected.png

Alerting

Email Alert:

CryptoStopper sends an email alert whenever ransomware activity is detected. Below is an example of the alert email.

email alert.png


CryptoStopper Workstation

Defense

Always on Protection:

CryptoStopper Workstation continuously runs as a service in the background. This provides the always on protection.

service_running.png

Malicious Process Terminate:

When a malicious process is detected, CryptoStopper Workstation immediately terminates the process, thus ending the ransomware activity. An alert is then presented to the users desktop.

CryptoStopper Workstation - Alert.png

Alerting

Email Alert:

CryptoStopper Workstation also sends an email alert whenever ransomware activity is detected. Below is an example of the alert email. Helpful information such as the path to the maliclious file, and the last file it accessed, are included in the email alert. 

email alert - workstation.png