Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Smart Filter for CryptoLocker Ransomware on Deep Discovery Inspector (DDI)

    • Updated:
    • 6 Dec 2017
    • Product/Version:
    • Deep Discovery Inspector 3.8
    • Deep Discovery Inspector 5.0
    • Platform:
    • N/A N/A
Summary

You want to know how to search for Cryptolocker Ransomware detections within DDI 3.8.

Details
Public

To generate a Smart Filter to search for this kind of Malware in DDI (version 3.8 and higher):

  1. Go to All Detections.
  2. Click on Advanced.
    • For DDI 3.8 SP1 and lower versions:

      On the Filter section, select Detection Name on the first dropdown menu.

    • For DDI 3.8 SP2 and higher versions:

      On the first dropdown menu, select Threat/Detection/Reference.

  3. On the second dropdown menu, select Contains.
  4. On the last field of the Filter section, type the following criteria:

    PE_VIRLOCK, TROJ_CRYPAURA, TROJ_CRYPTCOIN, JS_DOWNCRYPT, BAT_CRYPBOT, BAT_CRYPTOR, CRITOLOCK, ANDROIDOS_RANSOM, JS_DOWNCRYPT, TROJ_CRYPTFILE, TROJ_CRYPCTB, TROJ_CRYPTROLF, TROJ_CRILOCK, TROJ_CRYPTOR, TROJ_POSHCODER, ANDROIDOS_LOCKER, TROJ_CRIBIT, TROJ_CRYPTORBIT, TROJ_CRYPTDEF, TROJ_CRYPDEF, TROJ_CRYPTWALL, TROJ_CRYPWALL

    Filter section

  5. Click Search.
Premium
Internal
Rating:
Category:
Configure
Solution Id:
1110859
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support


To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.