All times are UTC - 5 hours [ DST ]




Post new topic Reply to topic  [ 3 posts ] 
Author Message
 Post subject: Anyone Know If These Headers are a Virus
PostPosted: August 20th, 2018, 15:10 
Offline
User avatar

Joined: June 11th, 2013, 17:01
Posts: 1022
Location: USA
I have a MicroSD Card. All folder structure is there with file names, but the headers for all files have been changed. If it is a virus I have not seen this before (no changes to file extensions). The headers detail the word 'console'. Anyone seen this before?


Attachments:
Sector 1.PNG
Sector 1.PNG [ 22.9 KiB | Viewed 787 times ]

_________________
HDD, SSD, Flash and RAID Data Recovery
Top
 Profile  
 
 Post subject: Re: Anyone Know If These Headers are a Virus
PostPosted: August 20th, 2018, 16:58 
Offline
User avatar

Joined: September 8th, 2009, 18:21
Posts: 10868
Location: Australia
Could it be a CryptConsole ransomware variant?

_________________
A backup a day keeps DR away.


Top
 Profile  
 
 Post subject: Re: Anyone Know If These Headers are a Virus
PostPosted: August 20th, 2018, 17:27 
Offline
User avatar

Joined: June 11th, 2013, 17:01
Posts: 1022
Location: USA
fzabkar wrote:
Could it be a CryptConsole ransomware variant?

All the files still have their existing names rather than an added extension created by the virus, and there is also no ransom note so I don't think so. But as this was a MicroSD it may have just been collateral damage, but the client says no virus hit his PC.

_________________
HDD, SSD, Flash and RAID Data Recovery


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 3 posts ] 

All times are UTC - 5 hours [ DST ]


Who is online

Users browsing this forum: Google Adsense [Bot] and 12 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group