Did test afterwards, as I said in the article. Didn't get the error or another attempt to install. Windows Update showed a clean "You're up to date!"
Honestly, never understood why ESET detects and removes ransom notes. Personally, find it frustrating.
Sorry for the confusion. Our story was about the SYSTEM control panel, not the system information program. This is the one we are referring to:...
Your getting the SYSTEM control panel page or the 'System Information' screen?
Mess up on my part :) Added em back as per our PM
Sorry to hear the news. RIP
I too knew Steve from the CastleCops days. Sorry to hear this news. R.I.P.
This is sad news indeed. RIP Don
I've found the culprit. Appears to be from a cracked Minecraft supposedly by TeamExtreme. The innosetup file will launch...
If I have learned one thing in life it is to surround yourself with people smarter than yourself...it just makes you look better :) Or stupider...
It wont go after system files. That would prevent the computer frmo starting. Their goal is to make money so they need your computer working...
I am happy to answer any questions here as well if any come up. This is an ugly one and seems to be wide spread. Not sure if its because of the...
Just to correct some incorrect info. The malwaretips guide is not accurate. Not sure what's been going on there, but their information used to be...
Yup, I am seeing the hash as 583af618f49b77824627a7b45ccf9ff9 at BC now too. He must have updated after I posted.
Heads up that Xplode just released 3.0. Hash for this release is: 1f099277de9b059678d0ba8b9044c465 Has new interface and quarantine.
The current version of AdwCleaner being offered by the author is 2.3.x. Xplode briefly released the 3.x version, but rolled it back to the 2.3.x...
Thanks Easter :) zfactor, thanks for the info. This is a strange one indeed. I searched on virustotal for any submissions under the name...
Maxstar found another one of these at BC. From the screen it does not look like ransomware as there are no demands or ransom requests....
Thanks again Marcos for letting everyone know about CF. For the rest of the discussion, if anyone wants to continue talking about it I would be...
Previous versions have been examined and were not infected. Regardless of what people say this was a specific instance and not something that has...
Randy, I honestly don't understand what you are trying to say. It's already established that ComboFix was infected with Sality, so it was pulled....
Randy, curious why you say the above link is infected?
Yup, the file is legit as it is hotlinked directly to my download. They are just trying to capitalize off of Rkill. Others have done this in the...
Separate names with a comma.
