Ransomware Prevention and Recovery Tips for Dynamics SL

 As a consulting and development organization working with Dynamics SL partners we have noticed an increased number of SL clients being infected with Locky (http://www.idigitaltimes.com/new-locky-ransomware-virus-spreading-alarming-rate-can-malware-be-removed-and-files-512956) and other ransomware viruses.  
 
The most noticeable immediate impact for Dynamics SL users is that the following message starts to appear in a variety of places in SL:

​The above message happens because the Locky virus will encrypt the messages.csv file (along with many other files) leaving you with a directory full of encrypted files that look like this:

The virus typically spreads through email attachments, such as word documents with infected macros.  
 
To help limit the spread of the virus to the Dynamics SL program files, you can reduce some of the access rights associated with the SL program files directory. Generally users would need Read, Read & Execute, and List Folder Contents to that directory. They would also need write access to the EventLog folder. You also temporarily need write access to the directory when creating the messages.csv for the first time, or when applying any sort of update or hotfix.   

Keep in mind, the typical user will never need full access rights, only the Administrator.  So in most cases this is one machine. That machine most likely is the server and would be best to not have Email on it at all.
 
Some additional ransomware preventative tips:

1. Update OS & security software
2. Never click on unknown links or download attachments from unknown sources
3. Show hidden file-extension
4. Disable files running from AppData/LocalAppData folders
5. Use AppLocker
6. Use EMET
7. Disable Windows Scripting Host
8. Disable Remote Desktop Protocol
9. Use Ransomware prevention tools

 
To learn the full details related to these preventative tips and additional recovery measures visit:
http://www.thewindowsclub.com/prevent-ransomware-windows
 
Next Steps
Contact Solomon Cloud Solutions to explore how we can help.

---

Solomon Cloud Solutions is a software publisher and consulting organization that provides development and consulting services to partners. Solomon Cloud Solutions was formed specifically to develop a complete cloud platform to accelerate development and deployment of their cloud based business solutions across their family of companies and their business partners. The Solomon Cloud Solutions companies operate under the brand names of Six Disciplines - publisher of performance management software, methodology and coaching and Beyond Software - publisher of project accounting software and are owned by Gary Harpst, Vernon Strong and Jack Ridge.