StopCrypt fears Tiny server build Backup bandwidth
Keep ransomware at bay
I’ve just read up on a new piece of ransomware that can evade detection and is aimed at consumer users. How can we protect ourselves from it?
—Samuel B Marshall
THE DOCTOR RESPONDS:
The ransomware you talk of is actually a variant of an existing form: StopCrypt. It has cleverly evolved to take a softly, softly approach to bypassing security measures, employing multiple delayed stages of execution to sneak on to a system before infecting it. StopCrypt doesn’t generate the same level of media attention (surprise, surprise) because it doesn’t involve huge sums of money being extorted from businesses. Instead, it focuses on us mere mortals, looking to extort hundreds of dollars in return for providing the key to decrypt your files and return them to a usable state.
While it’s worrying how ransomware has evolved, the chances of you catching it are slim unless you break all the rules of good security. For example, StopCrypt is commonly found in malvertising and dodgy downloads advertised as free and cracked software. If you’re partial to such activities, then you’ll already be dicing with infections from all kinds of malware, not just StopCrypt. Even if your security software has kept you safe so far, it’s not a smart way to operate, particularly if you do so on your main PC.
The obvious thing to do is steer clear of dodgy websites (or access them on a machine physically isolated from the your network). Second, make sure you have strong third-party anti-malware software, and run regular scans with another security package—the Premium version of Malwarebytes Anti-Malware is hot on blocking dangerous websites, and can be installed alongside existing security software. Failing that, run weekly scans using Malwarebytes Free, and consider adding the Emsisoft Emergency Kit ( www.emsisoft.com/en/ home/emergency-kit), a free portable anti-malware scanner that combines two antivirus engines—its own and Bitdefender’s—for a second (and third) opinion.
We also recommend finding ways to protect yourself against malvertising—look for ad blockers like Disconnect ( https://disconnect.me) and AdBlock Plus ( https:// adblockplus.org), which can strip out a lot of unwanted advertising, including ads containing hidden malware. If you want a universal solution to protect your network, read the January 2024 issue for our tutorial on setting up Pi-hole.
Ultimately, you also need to protect the target of any ransomware: your personal data. One obvious remedy is to make sure it’s regularly backed up—and in a location that ransomware can’t easily reach, such as offsite using a cloud backup tool like OneDrive. If that location is a network share, make sure it’s password protected, and that you’ve not checked ‘Remember my credentials’ when logging on in the past. If you have, open Credential Manager and select
Windows Credentials to view and remove any stored passwords. This prevents ransomware from being able to use these credentials to connect to remote shares and encrypt them, too.
Having to input your username and password each time is fiddly (although some backup software, including Macrium Reflect, can store your credentials within the program itself), but it might one day save you hundreds of dollars in extortion fees.
Micro server build
I enjoyed your latest NAS server build, but realize that I have no need for all the extra storage you’ve packed into the case. What I’d love to build is something akin to a tiny NUC PC, but using the components you did. I’m hoping I can do this with the AS Rock N100DC-ITX. Do you concur?
THE DOCTOR RESPONDS: You’ve got it in one, Daniel. Because the N100DC-ITX comes with a built-in PSU that’s powered from a standard laptop connector, you can house it in a similar style of case to those used by NUC PCs. The trick is not to look for a ‘mini ITX case’, because that’ll send you down the path of towers and NASstyle cases, like the Jonsbo N2 we featured in last month’s build. Instead, you need to think along the lines of HTPC.
One case worth checking out is MITXPC’s MX500USB3 ( https://mitxpc.com/ products/mx500-usb3). It’s got a tiny footprint (228.4 x 194.4 x 61.8 mm) and is designed for mobos with laptop power connectors, like the N100DC-ITX. Despite its tiny footprint, there’s space for two 2.5-inch drives (plus the board has a single NVMe slot), so you can still max out its limited storage potential at some point if your needs change. There’s also room for up to four 40mm case fans, although if the ventilation is as good as the Jonsbo N2, the CPU won’t max out above 50C/120F, even when taxed. MITXPC sells the MX500-USB3 direct for $ 49.95 plus shipping, or you can buy it from Amazon ( www.amazon.com/dp/ B0728DX73X) for $59.95.
Although it doesn’t offer any space for a PSU, MITXPC offers a choice of optional PICOPSU power supply boards (80W-120W) for pairing with an ATX-powered mobo like the ASUS Prime N100I-D4. Prices start from around $29.95 for the PICOPSU board (see https:// mitxpc.com/collections/ power-supplies)— you can either supply your own laptop power block, or purchase through MITXPC, which charges $94.95 for the PICOPSU board plus 120W laptop power block.
Throttle Duplicati backups
I’ve installed Duplicati (May 2023 issue), but have run into a problem with backing up to OneDrive. As soon as the backup starts, my internet connection grinds to a halt. I’ve tried setting a universal limit using the throttle option button, but it has no effect (ironically, it slows down all my local backups). A quick search online mentions some advanced settings, but I don’t know which ones to try—and even if they work or not. Can you advise?
THE DOCTOR RESPONDS: It can be a pain configuring Duplicati to work with cloud backups without it saturating your bandwidth, particularly on slower connections. Things are doubly complicated when there are multiple places where settings can be configured. We recommend ignoring Duplicati’s main Settings screen to focus on applying limits to individual backup jobs where possible.
To do this, first stop any cloud backups currently running, then expand the backup job on Duplicati’s home screen, and click
Edit under Configuration. Click Next to jump to the Destination screen, where your online storage should already be configured. Expand the ‘Advanced options’ and click the ‘- pick an option -’ dropdown menu. Select ‘fragment-size: Fragment size for large uploads’. You’ll see that it’s set to 10MB by default—try a lower setting (say 5MB) and click Next, skipping through the next few screens to land on the final Options page.
Here you’ll find yet another expandable Advanced options section. Clicking ‘- pick an option -’ here reveals an even bigger list of configurable options to choose from. Look for the ‘throttle-upload’ option and set it to a suitable level—say, 400 KByte/s—and click Save.
Once done, click ‘Run now’ next to the backup job, and monitor its upload speeds through the Duplicati interface. It should now respect your choice. Next,
run a bandwidth test using www.speedtest.net— if there’s still a noticeable lag, then edit the settings again, choosing a lower figure. On the other hand, if performance is fine, try higher figures until you strike the balance between getting your backups done in good time while maintaining a usable internet connection. Don’t forget to stop and restart the backup each time to apply any changes.
Upgrade key problem
I’ve purchased a Windows 11 Pro key to upgrade my Windows 11 Home machine. I’ve followed the instructions, but when I enter the key, I get a ‘ Windows upgrade failed’ message, with an error code of 0x80070490. Can you assist? —William Headrick
THE DOCTOR RESPONDS:
This is a common issue, particularly if you’re looking to upgrade without nuking your current installation and starting from scratch. The problem has been linked to an old version of the .NET Framework lurking on PCs— usually installed by a program that required it. It’s version 3.5 or lower, and you can resolve the issue and upgrade by opening the ‘Turn Windows features on or off’ Control Panel (search for ‘Windows Features’). You should see a ‘.NET Framework 3.5 (includes .NET 2.0 and 3.0)’ entry—clear the checkbox and click OK.
This should clear the error and allow you to upgrade to Windows 11 Pro; if it still doesn’t work for any reason, download the Windows 11 Media Creation tool ( https://go.microsoft. com/fwlink/?linkid=2156295) and use that to perform a repair install. It should clear any incompatible software, and once done, you’ll be able to upgrade successfully via the System > Activation section of Settings.
Can’t remove USB
Whenever I attempt to eject my USB thumb drive, Windows refuses to let me safely do so, claiming something is using it. What can I do to resolve this without having to either take a risk each time or shut down my PC to unplug the drive?
—Karen R Gillespie
THE DOCTOR RESPONDS:
If you’re unable to easily identify the app or process responsible for locking the drive, you can uncover it using Event Viewer. Type ‘event’ into the Search box, and launch Event Viewer from the results shown. Expand the Windows Logs section on the left and select System from inside it. Next, click ‘Filter Current Log…’ in the Actions pane on the right, type 225 into the
From here, you have a couple of choices—if there’s a reference to a specific file on the drive that’s been locked, try a free tool like Lockhunter ( https://lockhunter.com), which should be able to free up the file. Failing that, if a specific app is referenced, simply close all instances of it (check
Task Manager if necessary). Finally, if it’s a process, it’s probably best to log off or put your PC to sleep temporarily. You can then remove the drive safely without having to shut down and restart.