Forum Home
Press F1
 
Thread ID: 114363 2010-11-30 01:58:00 Virus Alert SolMiester (139) Press F1
Post ID Timestamp Content User
1157445 2010-11-30 01:58:00 Not sure if this has been covered, but this is a very nasty Trojan called Cypher, which encrypts the first few bytes of files then changes the ext to encoded. It also drops a text files stating the following........

Attention!!!
All your personal files (photo, documents, texts, databases, certificates, kwm-files, video) have been encrypted by a very strong cypher RSA-1024. The original files are deleted. You can check for this yourself - just look for files in all folders.
There is no possibility to decrypt these files without a special decrypt program! Nobody can help you - even don't try to find another method or tell anybody. Also after 3 days all encrypted files will be completely deleted and you will have no chance to get it back.
We can help to solve this task for 120$ via wire transfer (bank transfer SWIFT/IBAN). And remember: any harmful or bad words in our side will be a reason for ingoring your message and nothing will be done.
For details you have to send your request on this e-mail (with full serial key shown below in this 'how to..' file on desktop): recoverdata@secure-mail.biz


Please be careful what you download.
SolMiester (139)
1157446 2010-11-30 02:02:00 Ouch. That sounds like one bastard of a virus. Agent_24 (57)
1157447 2010-11-30 02:03:00 Looks like its already doing the rounds. And thats what you get, for using torrents Speedy Gonzales (78)
1157448 2010-11-30 02:05:00 Our CHCH member firm got hit yesterday, they only recovered because of backups.....They have no idea how it came in! SolMiester (139)
1157449 2010-11-30 02:12:00 Sounds like Doctor Evil

Whats RSA 1024? is that 1024 bit???
Gobe1 (6290)
1157450 2010-11-30 02:17:00 Its probably this (www.symantec.com). aka this (www.sophos.com)

It can infect a system, by opening a PDF file (nakedsecurity.sophos.com)
Speedy Gonzales (78)
1157451 2010-11-30 02:20:00 Looks like its already doing the rounds. And thats what you get, for using torrents

I think infected USB drives, email and drive-by downloads are more likely.

Bittorrent is fine if used sensibly, like downloading Ubuntu.

Of course I have seen some torrents which were specifically viruses, eg: an 8GB RAR file full of them. But anyone downloading that would be prepared (I hope!)
Agent_24 (57)
1157452 2010-11-30 02:26:00 Yeah, that looks like it speedy, doesnt look like many a/v are catching it! SolMiester (139)
1157453 2010-11-30 02:30:00 MSE might (www.microsoft.com) Speedy Gonzales (78)
1157454 2010-11-30 02:47:00 MSE might (www.microsoft.com)

Hope so! Sounds like a nasty one for sure.

Must revise my schedule driven backup strategy to help protect my USB drive from getting hit.
linw (53)
1 2 3 4 5