HDD GURU FORUMS

Hello Guys,

Anyone have seen this kind of attack with this extension .wqhzkwi

It rename any .doc .jpg .zip, etc ...

I could find what looks like a "Key" in the pictures folder.

Code:

71KWCA2BF766CAY2LZUJCARQEOZWCA2QRXLECADGO7NOCAZ3M41BCAOPMUPECALGOIFSCAV2STVZCAG8GNECCAL0JSVMCAXK4NLWCAUL4YEXCAL19NHZCAVRYO1JCAD68QAGCAOFD8QUCAEGGY7G.JPG.wqhzkwi

Any information wil be great,



Thanks,
Zebong

Yes, this is a ransom ware called CTB-Locker

viewtopic.php?f=1&t=30468

viewtopic.php?f=1&t=30403


Additional extension is random for all infected victims.

thanks that what i expected.