HDD GURU FORUMS
http://forum.hddguru.com/

Anyone Know If These Headers are a Virus
http://forum.hddguru.com/viewtopic.php?f=10&t=37277
Page 1 of 1

Author:  ddrecovery [ August 20th, 2018, 15:10 ]
Post subject:  Anyone Know If These Headers are a Virus

I have a MicroSD Card. All folder structure is there with file names, but the headers for all files have been changed. If it is a virus I have not seen this before (no changes to file extensions). The headers detail the word 'console'. Anyone seen this before?

Attachments:
Sector 1.PNG
Sector 1.PNG [ 22.9 KiB | Viewed 4805 times ]

Author:  fzabkar [ August 20th, 2018, 16:58 ]
Post subject:  Re: Anyone Know If These Headers are a Virus

Could it be a CryptConsole ransomware variant?

Author:  ddrecovery [ August 20th, 2018, 17:27 ]
Post subject:  Re: Anyone Know If These Headers are a Virus

fzabkar wrote:
Could it be a CryptConsole ransomware variant?

All the files still have their existing names rather than an added extension created by the virus, and there is also no ransom note so I don't think so. But as this was a MicroSD it may have just been collateral damage, but the client says no virus hit his PC.

Page 1 of 1 All times are UTC - 5 hours [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/