HDD GURU FORUMS
http://forum.hddguru.com/

ransomware - file extension " .wqhzkwi " - anyone see this
http://forum.hddguru.com/viewtopic.php?f=7&t=30544
Page 1 of 1

Author:  zebong [ February 11th, 2015, 13:13 ]
Post subject:  ransomware - file extension " .wqhzkwi " - anyone see this

Hello Guys,

Anyone have seen this kind of attack with this extension .wqhzkwi

It rename any .doc .jpg .zip, etc ...

I could find what looks like a "Key" in the pictures folder.

Code:
71KWCA2BF766CAY2LZUJCARQEOZWCA2QRXLECADGO7NOCAZ3M41BCAOPMUPECALGOIFSCAV2STVZCAG8GNECCAL0JSVMCAXK4NLWCAUL4YEXCAL19NHZCAVRYO1JCAD68QAGCAOFD8QUCAEGGY7G.JPG.wqhzkwi


Any information wil be great,



Thanks,
Zebong

Author:  samurai7 [ February 11th, 2015, 17:11 ]
Post subject:  Re: ransomware - file extension " .wqhzkwi " - anyone see t

Yes, this is a ransom ware called CTB-Locker

viewtopic.php?f=1&t=30468

viewtopic.php?f=1&t=30403


Additional extension is random for all infected victims.

Author:  zebong [ February 12th, 2015, 5:53 ]
Post subject:  Re: ransomware - file extension " .wqhzkwi " - anyone see t

thanks that what i expected.

Page 1 of 1 All times are UTC - 5 hours [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/