<t>guys, discovered something weird.<br/>
i think this as been on our computers for longer than we think...<br/>
25/05/2015 @ 00:18- folder rkcl where the virus resides was installed<br/>
25/05/2015 @ 00:00 - a folder named steg was created (before the rkcl!) with a steg.exe inside<br/>
19/05/2015 @ 22:12 - folder named TOR created , again...i NEVER installled this deep web browser (could someone or a botnet whatever be accessing my computer from this time on? and later installed that rkc thing?)<br/>
10/05/2015 @ 19:39 - on the same day as TOR, a folder named Digger was created, it is blank now.<br/>
<br/>
All this happened inside the program data folder in c:\programdata<br/>
<br/>
Also, beware the LDR service that the locker virus launches. i already had the LDR service running before i had the RKCL thing in my computer, i just saw it in event viewer. You see how weird it is? check inside your RKCL folder, you have a ldr.exe there</t>
