Jump to content

RSA-2048 virus

gabada
By gabada
in Troubleshooting
 Share
Posted

Hello guys,

I am new here so I don't know if I am posting this problem in correct topic.

 

On my PC, one of my drives ( E: ) has problem. Please look for attached photos.

All the files I was working on, has been disappeared and new shortcuts with .cc extension has been added.

Show Hidden Files is checked on but nothing else is there.

As I have googled it is RSA-2048 Virus that encrypts your files.

 

Any suggestions ? I have used all the suggested Anti Malware and Anti Virus programs but no sense.

P.S. Don't know from where did it spread

 

58679252_1278083829012717_2997285331725713408_o.jpg

58745114_1278084192346014_3719714705112039424_o.jpg

---___--- HP Probook 450 G0 ---___---

I5-3230M 2.60Ghz ( 4 CPUs ) ~ 2.6Ghz

8192Mb RAM

AMD Radeon HD 8600/8700M

120 GB SSD + 1TB HDD

Link to comment
https://linustechtips.com/topic/1057409-rsa-2048-virus/
Share on other sites
Link to post
Share on other sites
Posted

You got affected by ransomeware. Look like Scarab? I'm not sure.

| Intel i7-3770@4.2Ghz | Asus Z77-V | Zotac 980 Ti Amp! Omega | DDR3 1800mhz 4GB x4 | 300GB Intel DC S3500 SSD | 512GB Plextor M5 Pro | 2x 1TB WD Blue HDD |
 | Enermax NAXN82+ 650W 80Plus Bronze | Fiio E07K | Grado SR80i | Cooler Master XB HAF EVO | Logitech G27 | Logitech G600 | CM Storm Quickfire TK | DualShock 4 |

Link to comment
https://linustechtips.com/topic/1057409-rsa-2048-virus/#findComment-12506228
Share on other sites
Link to post
Share on other sites
Posted
24 minutes ago, gabada said:

Hello guys,

I am new here so I don't know if I am posting this problem in correct topic.

 

On my PC, one of my drives ( E: ) has problem. Please look for attached photos.

All the files I was working on, has been disappeared and new shortcuts with .cc extension has been added.

Show Hidden Files is checked on but nothing else is there.

As I have googled it is RSA-2048 Virus that encrypts your files.

 

Any suggestions ? I have used all the suggested Anti Malware and Anti Virus programs but no sense.

P.S. Don't know from where did it spread

 

58679252_1278083829012717_2997285331725713408_o.jpg

58745114_1278084192346014_3719714705112039424_o.jpg

Yup that's ransomware, best to restore back-up if you have one. Otherwise to say it out loud "you're screwed" :/ you could try to decrypt it but I don't think you have an success

Main PC:

CPU: AMD Ryzen 7 5700X3D | RAM:Corsair LPX 3200 mhz (32GB) 

Mobo:ASUS Strix B550-F Wifi | GPU: Gigabyte 9070

Case: Sharkoon Nightshark RGB| Storage: 500 GB 970 EVO Plus 1 TB WD blue 500 GB Samsung HDD

Monitor: iiyama G-Master G2470HSU-B1 165Hz

Powersupply: Cooler Master GX III Gold 750

 

 

Main Laptop

CPU: AMD Ryzen 7 4800H | RAM: Team group 16 GB 2666 mhz

GPU: RTX 2060 (MXM swappable)

Monitor: 1080p 120Hz

Storage: 2x 1 TB Samsung 970 EVO NVMe (no raid)

 

 

Second Laptop

CPU: Intel Core I5 1235u,  RAM: Crucial 16 GB 3200 mhz

GPU: IrisXe 80 eu

Storage: 512 GB WD Digital SN530 NVMe

 

Phone:

Xiaomi MI 11

 

Work Phone:

Samsung Xcover 6pro

 

Link to comment
https://linustechtips.com/topic/1057409-rsa-2048-virus/#findComment-12506256
Share on other sites
Link to post
Share on other sites
Posted
  • Author
3 minutes ago, Wolly9102 said:

Yup that's ransomware, best to restore back-up if you have one. Otherwise to say it out loud "you're screwed" :/ you could try to decrypt it but I don't think you have an success

Now I am calm down :X

---___--- HP Probook 450 G0 ---___---

I5-3230M 2.60Ghz ( 4 CPUs ) ~ 2.6Ghz

8192Mb RAM

AMD Radeon HD 8600/8700M

120 GB SSD + 1TB HDD

Link to comment
https://linustechtips.com/topic/1057409-rsa-2048-virus/#findComment-12506265
Share on other sites
Link to post
Share on other sites
Posted

First off, Spyhunter is a rather questionable program. Secondly, even if the malware is removed, the files remain encrypted.

 

Your best bet is to look here, and see if there is a decryption tool which can recover your files:

https://www.nomoreransom.org/en/decryption-tools.html
 

Link to comment
https://linustechtips.com/topic/1057409-rsa-2048-virus/#findComment-12506996
Share on other sites
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
 Share
Go to topic listing Troubleshooting

×