Forum RSS Feed Follow @ Twitter Follow On Facebook

Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
[-]
Welcome
You have to register before you can post on our site.

Username:


Password:





[-]
Latest Threads
[QUESTION] Modding an AMI bios to bypass...
Last Post: misty
Today 06:56 PM
» Replies: 8
» Views: 784
[request] EP45T-DS3R bios mod microcodes...
Last Post: soundguy
Today 05:23 PM
» Replies: 0
» Views: 50
Lenovo T460 - I need a repair of the BIO...
Last Post: mmhendrie
Today 04:48 PM
» Replies: 11
» Views: 5913
CLEVO BIOS Mods
Last Post: Danmaq
Today 03:58 PM
» Replies: 240
» Views: 470394
[Request] Acer Aspire V3-771(G) BIOS unl...
Last Post: TempoZZ
Today 12:48 PM
» Replies: 260
» Views: 133804
[REQUEST] Clevo NH77HP BIOS Unlock
Last Post: sunnymuth
Today 04:51 AM
» Replies: 6
» Views: 3345
(request) unlock all bios remove whiteli...
Last Post: kslmgd
Yesterday 06:28 PM
» Replies: 0
» Views: 270
[REQUEST] Lenovo G50-70 (9ACNxxWW) White...
Last Post: Dudu2002
Yesterday 12:33 PM
» Replies: 241
» Views: 104185
GL40 Chipsatz+Intel Core 2 Extreme X7900
Last Post: Moddo73@PROXIMUS
Yesterday 09:00 AM
» Replies: 2
» Views: 238
[REQUEST] BIOS UNLOCK ACER Predator PHN1...
Last Post: Dudu2002
Yesterday 05:18 AM
» Replies: 1
» Views: 280
[request] Update microcode in HP BIOS fo...
Last Post: j5blue
Yesterday 04:53 AM
» Replies: 90
» Views: 73430
Request: ThinkCentre M73 (Tiny 10AY) ful...
Last Post: Ragerist
Yesterday 04:49 AM
» Replies: 0
» Views: 224
[Request] HP 620 whitelist removal
Last Post: Moddo73@PROXIMUS
Yesterday 01:03 AM
» Replies: 9
» Views: 11745
[REQUEST] Lenovo Thinkpad X240 (GIETxxWW...
Last Post: Dudu2002
04-23-2025 06:11 PM
» Replies: 340
» Views: 163570
Dell Optiplex GX520/620 Incompatible Pro...
Last Post: taggertie86
04-23-2025 03:22 PM
» Replies: 18
» Views: 19583
Request. optiplex 5050 bios modd for cpu...
Last Post: DeathBringer
04-23-2025 02:15 PM
» Replies: 8
» Views: 691
[Unlocked] Acer Aspire One D250
Last Post: sofie_gold
04-22-2025 09:29 PM
» Replies: 6
» Views: 7820
T3500 BIOS: How to Unlock Advanced CPU F...
Last Post: DEX0ZEN
04-22-2025 02:26 PM
» Replies: 0
» Views: 491
[REQUEST] Asus X756UV Firmware Unlock
Last Post: moriel5
04-22-2025 03:08 AM
» Replies: 0
» Views: 424
Lenovo IdeaPad 300-15ISK and 100-IBY BIO...
Last Post: moriel5
04-22-2025 02:43 AM
» Replies: 9
» Views: 7820

Acer 5750 Pc Hack..
#1
Hello, I have an acer 5750~g series i5 2nd generation laptop about 1.5 months ago (RIGJ) (MOIA) Under Swrtifi with EXTENSION Infected with Virus and changed all my memory its Extension Revert Extension but I can't open my files, photos and videos. Please I'm waiting for support. Thank you Recep from Turkey
find
quote
#2
Is this virus requesting payment?
find
quote
#3
yes i have come across the possibility of ransom virus researches
find
quote
#4
Also, whenever I turn on my laptop and change the hdd, it doesn't work. They make a connection, what should I do?
find
quote
#5
(12-26-2021, 01:07 AM)recep03500 Wrote: yes
If you want to recover data, follow what this virus asks for.
find
quote
#6
? ???
find
quote
#7
What is this virus called?
find
quote
#8
txt formatında açıklamasını atabilirim istersen
find
quote
#9
File Information
Size553KSHA-1c32b61c45986dc968a5f171d3908529f696fbd5fMD58d73e53c7ea2fe803c7d6f1d5033a94fCRC-32b039e34aFile typeapplication/x-ms-dos-executableFirst seen2011-04-20
Runtime Analysis
Copies Itself To
c:\Documents and Settings\test user\Local Settings\Temp\ircbsbot.exe
Dropped Files
c:\Documents and Settings\test user\Local Settings\Temp\data.dat
Size32SHA-1a63834dcdb4c35d355adff7bb74e707a6aff5a18MD5b631415fa89b240b97137ec5667af007CRC-328365a11eFile typeapplication/octet-streamFirst seen2011-04-20
Registry Keys Created
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
winlogonC:\DOCUME~1\support\LOCALS~1\Temp\ircbsbot.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
winlogonC:\DOCUME~1\support\LOCALS~1\Temp\ircbsbot.exe
HKCU\Software\VB and VBA Program Settings\INSTALL\DATE
NT4CULVUBIApril 20, 2011
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile
DoNotAllowExceptions0x00000000
HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
c:\test_item.exec:\test_item.exe:*:Enabled:Windows Messanger
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\run
winlogonC:\DOCUME~1\support\LOCALS~1\Temp\ircbsbot.exe
Processes Created
c:\windows\system32\cmd.exe
c:\windows\system32\reg.exe
DNS Requests
eastncballer.dyndns.info

https://ibb.co/MGygQp8
find
quote
#10
(12-26-2021, 03:00 AM)recep03500 Wrote: ircbsbot.exe
There is no information on the search for the file name on the net and, accordingly, there are no existing solutions. When activated, this virus establishes remote communication with the attacker's computer, so it can assume that the virus can either encrypt and allow to see your private files, but that doesn't matter.
Could you send me a downliad link to this file IN PRIVATE MESSAGES? For safety.
find
quote


Forum Jump:


Users browsing this thread: 1 Guest(s)