Forum RSS Feed Follow @ Twitter Follow On Facebook

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
[-]
Welcome
You have to register before you can post on our site.

Username:


Password:





[-]
Latest Threads
[REQUEST] Lenovo Thinkpad T440p (GLETxxW...
Last Post: uncle_Fedya
Today 03:54 PM
» Replies: 524
» Views: 221420
[REQUEST] Lenovo T440(S) (GJETxxWW) Whit...
Last Post: Dudu2002
Today 01:56 PM
» Replies: 497
» Views: 207243
[REQUEST] Gigabyte G5 KF BIOS unlock
Last Post: Dudu2002
Today 01:55 PM
» Replies: 3
» Views: 152
[REQUEST] Lenovo Legion 5 (EFCNxxWW) BIO...
Last Post: Dudu2002
Today 03:32 AM
» Replies: 44
» Views: 20952
Gigabyte b650e aorus master F33b
Last Post: Anem
Yesterday 11:59 PM
» Replies: 0
» Views: 120
Xeon E5 2699 V3 (turbo Unlock) for Bios-...
Last Post: xlr8r
Yesterday 11:42 AM
» Replies: 0
» Views: 217
[REQUEST] Acer Nitro 5 AN515-54 BIOS Unl...
Last Post: Dudu2002
Yesterday 11:26 AM
» Replies: 128
» Views: 53180
[REQUEST] Lenovo Thinkpad X1 Carbon Gen3...
Last Post: Dudu2002
Yesterday 08:50 AM
» Replies: 38
» Views: 17932
HP Probook 640 G2 bricked BIOS
Last Post: Milovanovic1992
Yesterday 08:13 AM
» Replies: 0
» Views: 156
Dell Optiplex 3060 add 9th Gen CPU suppo...
Last Post: nickedasy
Yesterday 03:31 AM
» Replies: 18
» Views: 1373
AM3 support for a Compaq
Last Post: DeathBringer
Yesterday 01:01 AM
» Replies: 1
» Views: 230
Bios modding to support more RAM (Pegatr...
Last Post: DeathBringer
03-31-2025 01:33 PM
» Replies: 1
» Views: 318
[Request] ASUS X93SV (Whitelist Removal)
Last Post: Supercharger
03-30-2025 05:48 AM
» Replies: 1
» Views: 2317
Downgrade bios for Acer Aspire E1-571(G)...
Last Post: Rodrigowbs
03-29-2025 11:18 PM
» Replies: 24
» Views: 21658
[Request] Samsung Series 7 Slate PC
Last Post: SwCore
03-29-2025 10:23 PM
» Replies: 16
» Views: 17309
[Request] Alienware M18 R1 AMD(version) ...
Last Post: 009drmq
03-29-2025 09:20 AM
» Replies: 0
» Views: 407
Acer nitro an16-41 device bios is corrup...
Last Post: Serwintes
03-29-2025 07:25 AM
» Replies: 0
» Views: 302
[REQUEST] Lenovo G710 BIOS Whitelist Rem...
Last Post: Sonnnnnni Sid
03-29-2025 06:41 AM
» Replies: 485
» Views: 191037
MSI MS 7301 cuba packardbell
Last Post: Turyfriscu
03-29-2025 02:08 AM
» Replies: 0
» Views: 234
Toshiba Satellite A210 A215 v2.30 With T...
Last Post: rodcsant
03-28-2025 02:14 PM
» Replies: 10
» Views: 29022

Acer 5750 Pc Hack..
#1
Hello, I have an acer 5750~g series i5 2nd generation laptop about 1.5 months ago (RIGJ) (MOIA) Under Swrtifi with EXTENSION Infected with Virus and changed all my memory its Extension Revert Extension but I can't open my files, photos and videos. Please I'm waiting for support. Thank you Recep from Turkey
find
quote
#2
Is this virus requesting payment?
find
quote
#3
yes i have come across the possibility of ransom virus researches
find
quote
#4
Also, whenever I turn on my laptop and change the hdd, it doesn't work. They make a connection, what should I do?
find
quote
#5
(12-26-2021, 01:07 AM)recep03500 Wrote: yes
If you want to recover data, follow what this virus asks for.
find
quote
#6
? ???
find
quote
#7
What is this virus called?
find
quote
#8
txt formatında açıklamasını atabilirim istersen
find
quote
#9
File Information
Size553KSHA-1c32b61c45986dc968a5f171d3908529f696fbd5fMD58d73e53c7ea2fe803c7d6f1d5033a94fCRC-32b039e34aFile typeapplication/x-ms-dos-executableFirst seen2011-04-20
Runtime Analysis
Copies Itself To
c:\Documents and Settings\test user\Local Settings\Temp\ircbsbot.exe
Dropped Files
c:\Documents and Settings\test user\Local Settings\Temp\data.dat
Size32SHA-1a63834dcdb4c35d355adff7bb74e707a6aff5a18MD5b631415fa89b240b97137ec5667af007CRC-328365a11eFile typeapplication/octet-streamFirst seen2011-04-20
Registry Keys Created
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
winlogonC:\DOCUME~1\support\LOCALS~1\Temp\ircbsbot.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
winlogonC:\DOCUME~1\support\LOCALS~1\Temp\ircbsbot.exe
HKCU\Software\VB and VBA Program Settings\INSTALL\DATE
NT4CULVUBIApril 20, 2011
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
DoNotAllowExceptions0x00000000
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
c:\test_item.exec:\test_item.exe:*:Enabled:Windows Messanger
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run
winlogonC:\DOCUME~1\support\LOCALS~1\Temp\ircbsbot.exe
Processes Created
c:\windows\system32\cmd.exe
c:\windows\system32\reg.exe
DNS Requests
eastncballer.dyndns.info

https://ibb.co/MGygQp8
find
quote
#10
(12-26-2021, 03:00 AM)recep03500 Wrote: ircbsbot.exe
There is no information on the search for the file name on the net and, accordingly, there are no existing solutions. When activated, this virus establishes remote communication with the attacker's computer, so it can assume that the virus can either encrypt and allow to see your private files, but that doesn't matter.
Could you send me a downliad link to this file IN PRIVATE MESSAGES? For safety.
find
quote


Forum Jump:


Users browsing this thread: 1 Guest(s)