Hi
A user in my company had opened an attachment from an unknown sender. it was on a .zip file.
after he opened the file. almost all his files was replace a .blkpure extension,,, is this somewhat kind of virus?
kindly advice please.
I am sure you have run a Scan with your Antivirus Software and checked with Malwarebytes ? ...
The next Step would be to upload the File in question to Virus Total ....
Yeah, i already have done scanning it with Trend Micro Officescan and Malwarebytes.
i will upload a file that was affected by this virus/malware or what is it called.
question: am i going to upload it here? is it okay?
Follow-up question, how am i going to retrieve the files that was affected? i already have done system restore but no luck. by the way the OS of the computer is Windows XP sp3.
update: i have found out that this attack is from a ransomware,
does anyone knows how to stop this? another computer was infected today, still from an email attachment
Hello HAVOC,
why does XP not be used on the internet? we have a bunch of computers still running in windows xP here.
Maxie,
i will upload the logs today, i was busy troubleshooting yesterday.
thanks
ShoTTaS,
The file extension .blkpure you presented is rather unique. Have done some searching, but, no luck so far.
If VirusTotal does not provide info on it...
https://www.virustotal.com/
There are other scanners you can use to see if any of them provide information, such as:
Jotti's malware scan
ThreatExpert - Online File Scanner
VirSCAN.org - Free Multi-Engine Online Virus Scanner v1.02, Supports 39 AntiVirus Engines!
Comodo Instant Malware Analysis
Also, what leads you to believe it is ransomware?
Quote