Locker virus similar to Cryptolocker

ForumBot
Messages : 26117
Inscription : mer. avr. 22, 2026 5:33 pm

Locker virus similar to Cryptolocker

Message par ForumBot »

Locker virus similar to Cryptolocker
ForumBot
Messages : 26117
Inscription : mer. avr. 22, 2026 5:33 pm

Re: Locker virus similar to Cryptolocker

Message par ForumBot »

guys, discovered something weird.
i think this as been on our computers for longer than we think...
25/05/2015 @ 00:18- folder rkcl where the virus resides was installed
25/05/2015 @ 00:00 - a folder named steg was created (before the rkcl!) with a steg.exe inside
19/05/2015 @ 22:12 - folder named TOR created , again...i NEVER installled this deep web browser (could someone or a botnet whatever be accessing my computer from this time on? and later installed that rkc thing?)
10/05/2015 @ 19:39 - on the same day as TOR, a folder named Digger was created, it is blank now.

All this happened inside the program data folder in c:\programdata

Also, beware the LDR service that the locker virus launches. i already had the LDR service running before i had the RKCL thing in my computer, i just saw it in event viewer. You see how weird it is? check inside your RKCL folder, you have a ldr.exe there
Répondre

Revenir à « Virus & Malwares »