First, it isolated the ransomware in a virtual cage (a trick v.7.0.1461 had learned from its firewall module). The malware thought it was encrypting the real C:\Documents , but it was only touching a decoy sandbox.
The screen flickered. A black terminal box appeared, typing on its own: Avast Internet Security Antivirus Pro v 7 0 1461
Sentinel didn’t feel pride. It was version 7.0.1461—not yet capable of emotion. But that night, as it performed its weekly quick scan, it logged a quiet, private note in its own debug file: First, it isolated the ransomware in a virtual
Dr. Thorne, who had been reaching for his credit card in a panic, blinked. He had no idea how close he had come to losing fifty years of research. He only saw the green checkmark and whispered, "Good antivirus." A black terminal box appeared, typing on its
Unusual process injection. Attempting to write to system32. Behavior resembles: Ransomware. Variant: Unknown.
Second, Sentinel rolled back the registry keys CryptoLatch had poisoned, using its boot-time scan shield.