COURSE CODE / COURSE

DFP6033
NAME

COURSEWORK
JABATAN TEKNOLOGI MAKLUMAT & Problem Based Exercise 4
ASSESSMENT
KOMUNIKASI
SESSION DIS 2017

NAME
DURATION CLO2
REGISTRATION NO.

PROGRAMME/SECTION TOTAL MARKS 20

Case Study "Decryption Note":

Your friend Jeffry asked for your advices on a malware incident. He suspected that his laptop has been infected
with an unknown malware. All the files in his laptop cannot be accessed and he found a note file in TXT format.
This note stating that the important files in his computer have been encrypted. In order to decrypt the files he
needs to send a file to the email given in this note.
Below is the screenshot of the note:

As a security researcher, your tasks are:

 Identify what type of malware this is and find its name.
 Should he (Jeffry) follow the instruction given in this note? Explain why and what are the suitable
actions should be taken by Jeffry.
 What are the actions can be taken to prevent this kind of incident happen in the future?
 Provide relevant references for this task
~ END OF QUESTIONS ~
 Rubrics
# Case Study: "Decryption Note"
Criteria
Identify the type of malware
and find its name.
Explain the suitable actions
should be taken by Jeffry and
why this action should be
taken.
Identify actions can be taken to
prevent this kind of incident
happen in the future
References
Score Marks
5-4 3-2 1
Able to identify and thoroughly explain the Able to identify and briefly explain the Only able to identify the
type of malware and its name type of malware and its name type of malware
Able to identify and thoroughly explain the Able to identify and briefly explain the Only able to identify the
suitable actions should be taken by Jeffry suitable actions should be taken by Jeffry actions should be taken
with its relevant reasons by Jeffry
Able to identify the relevant prevention Able to identify the relevant prevention Only able to identify a
actions with its explanation actions few prevention actions
Provide multiple relevant references Provide some relevant references to Only provide simple
related to this incident this incident. references