Anybody heard of "ZOBM" ransomware if so whats the best fix PLEASE ?

[sheffieldyorky]

Anybody heard of "ZOBM" ransomware if so whats the best fix PLEASE ?

While I was on holiday in Ecuador I fixed a friends laptop, well it was the daughters actually but anyway.
On boot up it had multiple pages of "thegoodcaster.com" so I set to and cleaned it and removed all traces and its now working fine.
What I didn't know was that it had dragged along with it the ZOBM ransomware and it had embedded itself onto my stick holding all my utility software and files all of which are now infected.:mad2:
I have undertaken a ZOBM search on here but nothing showing.:banghead:
I have done a search on our friend Google but the only site I recognise is "bleepingcomputer" but when you click the link it is dead or doesn't go anywhere and when you go direct to the site and undertake a search for it comes back with "This page can’t be displayed".
On a spare laptop I'm running a program (in safe mode ) at the moment that is scanning the external drive and it could not clean it.
I have tried getting onto the "malwarebytes" site my desktop can't access the site.
Any ideas anybody
I need this stick for my utilities
:grouphug:

 

[torchwood]

Hi Sheffield,

Get over to bleeping on your spare - post there.
is there a file extention after each file, ie myutility.stop - this will identify the malware involved.


Roy

 

[sheffieldyorky]

Hi Sheffield,

Get over to bleeping on your spare - post there.
is there a file extention after each file, ie myutility.stop - this will identify the malware involved.


Roy

Hi Roy
The extension is zobm
It is attached to every folder and file
Tony

 

[Alejandro85]

It probably means that the computer you repaired was likely also infected. Like with all virus attack, the only reasonable action is to wipe the affected computer and reinstall the operating system from scratch, restoring your last safe backup afterwards.
Your pendrive likely has to go though the same procedure, just wipe it and ensure it's clean afterwards, then restore all your utilities from backups.

Don't bother with antiviruses at this point. They've already failed prevent anything.

 

[Snick]

I wouldn't trust the pen drive, flash drive either! bios injection. re-flash bios with fresh/clean copy.
Bios Virus 2019
How to Cleanse a Virus in BIOS

 

[sheffieldyorky]

I wouldn't trust the pen drive, flash drive either! bios injection. re-flash bios with fresh/clean copy.
Bios Virus 2019
How to Cleanse a Virus in BIOS

I have now transferred the contents of the pen drive to the "spare laptop"
I then formatted the empty pen drive.
As this is a spare laptop that I was going to sell (only needs a keyboard and a battery ) I will use this to experiment on.
So if anybody has any ideas I will be more than happy to try them out and report back the results.
I will take a photo, I will not use a screenshot "just in case".
The spare laptop and the desktop are in no way connected so there will be no possibility of any data transferring across.
Tony

 

[RolandJS]

And, of course, the spare laptop will have to be wiped clean.