Trojan.Ransom.Petya (Petya 2.0 2016 Ransomware, flashing lights warning)

hopefully my explanation of how it spreads/works is accurate, but everything with it is pretty new so i might be wrong.
links for some good reading on the topic:

Special thanks to the following patrons for their support! I really appreciate it!

crymera
Mister Sparkly
John Kizer
Numou Impfox
Jacob W.
Joshua Mack
Thomas H Khoury
squigly-kip
Sleepy Owl
BluePolarBearz
Alice J
Blaise
CutePikachu
Renaud Bedard
Rosenator

[danooct]

My mistake - this is actually the 2.0 version of Petya from 2016, and not the network spreading variant that hit Europe and other parts of the world yesterday. I'll try to have a new video up tonight if I can find the *correct* sample, maybe I'll even LAN a few computers together and let it go to town.

thanks to everyone who let me know about this!

[TheDopeyElephant]

Now I know what to get if my neighbor is stealing my wifi

[asasasasasasasa]

Fucking hell, this one is actually legitimately TERRIFYING, and not just because of the "screamer" (more of a flasher).

Can't really explain why, it just seems so...

[TheLivingHeiromartyr]

I now realize how much of a blessing it is that I have nothing on my computer that I really need.

[trekkie]

- requires e-mail to get the key to unlock the files
- blocks *entire computer* which makes using e-mail obviously impossible.

logic so much.

[mikelmendioroz]

This is the "red" variant of Petya which can be decrypted due to vulnerabilities in the encryption itself. The new(ish?) green one has it fixed and there's no cure.

[sundragoonx]

Person1: oh hey what’s your dog’s name?
Person2: ransomware.
P1: How about you Petya ransomware?
P2: *intense pupper petting*

[Turutle]

One of the few YouTube notifications i'll check out right away

[JetFuueled]

Read the title as Peta at first and was like "Oh boy"

[butterflywings]

That flashing skull is, like, specifically designed to cause seizures oh my gosh. Thanks for putting the flash warning!

[olekzonder]

I've seen this ransomware on the Russian channel.The worst part is that russian systems were encrypted, but channels focus on the fact that Ukrainian systems were encrypted as well.And most channels proudly announce that ransomware's name is the name of Ukrainian president Pyotr (Petya) Poroshenko.I hate this politician crap.

[stalinyourleader]

Hey, just wanted to say that I love these virus videos you make! in the last week I've been binge watching a ton of em, so I hope I've made you that sweet ad money so you can continue doing this awesome stuff!
(*insert floppy drive seek test here*)

[yungsunnyd]

Thanks for keeping my PC safe with your knowledge! Glad to have a youtuber like you

[defbdishonor]

Kinda hard to have sympathy for companies when wannacry just happened and they don't learn from mistakes. Just sucks that hospitals can be affected by this and put people's lives at risk

[InterstellarVulpine]

GOT YOUR COMPUTER, GIMME YA MONEY, FUCCBOI!

[deltacell]

"We'll run this dropper which will infect our pc, search for more computers to infect and ultimatly crash the system so the new bootloader can take hold and decrypt your drive. So let's run it!"
Dan. Dan never changes.

[acrobro]

friend: where is petya ur girlfriend
me:she ransomware

[mattquellobello]

Petya: encrypts the sistem
Victim: re-install the sistem
Petya creator: You are not supposed to do that
Victim: This Is what i call a "pro gamer move"

[DMack]

*- Computer?*

*Computer machine broke.-*

*-Understandable have a great day.*

[lTRC]

"Do we want to make changes. You bet we do."
danooct1 - June 27, 2017, or October 24, 2016, at 12:24 pm.