CryptoLock locks out Spotify

Viruses and worms
1

Hello again
First thanks for all the help in eliminating a major attack on my computer. (FYI it came from a false “Update Adobe Flash” pop up. Looked like the real thing)

As a final step in cleaning I ran CryptoLock per your request. When I wanted to start Spotify, a legitimate music streaming site, I get " …locked out by group policy…check your administrator…". Spotify loads in the Windows/Roaming folder; I checked my registry where the many cryptolock keys are, there are several roaming ones. How can I let Spotify to work and still have the cryptolock keys active?

2

CryptoPrevent you mean?

I’ve never had any issues with it blocking files like that… Interesting. I will search around, see what I find :slight_smile:

3

yes

4

The way to resolve this is to run cryptoprevent and remove all protection
Run Spotify and keep it active then reset the cryptoprevent basic protection

5

Attached is a section of the registry…removal of these keys seems to eliminate the …see administrator…popup

6

WILCO

7

Someone had a similar problem with torrent yesterday, the problem is that it runs exe files from the temp and unless they are whitelisted they will not be allowed to run
Doing the above adds it to the whitelist

8

:cry:

Ran crypto to remove all locks. Rebooted. Ran Spotify and kept it active will I ran Crypto set to default. Rebooted. Crpto active but could not run Spotify, same security message.

9

OK ;D

Added it to white list manualy and now all is fine. Thanks for the “whitlist” reference.