ICCC virus

[IFailStuff]

ransomeware lol. we should make hostageware while we're at it

haha yeah, good one

[rasenove]

ransomeware lol. we should make hostageware while we're at it

lol what will it do? Take the computer as a hostage and demande money for its freedome ?

[vezzy]

lol what will it do? Take the computer as a hostage and demande money for its freedome ?

I believe this is pretty close. Granted, it doesn't actually physically lock the computer and leave you a note asking for money. That would be a pretty badass program.

What's interesting is that the authors were honest. Paid up, they gave you the resources for decryption (at least for certain variants).

[Super_mario666]

I haven't done it in awhile but you can boot up a live linux cd like Proxx mentioned and get clamav going on the drive or manually remove them. Unfortunately it won't affect anything in the registry. With Clamav.

to change the registry via cmd use the command REG[parameters] registry/location.


this sound like a real badass virus. i wanna to run it in a virtual machine just to see what happens.

[theellimist]

I heard that some people had luck booting to safemode then restoring their computer to a few days before. Then update java and flash as those are the possible attack points and the exploit has since been patched. And yeah, ransomware is quite a clever idea, I remember there was some fake antivirus ransomware on a family member's computer that said you had a virus and that you had to buy their bullshit software to clean it.

[lifecabal]

Rescue Disk might help. Btw where i can get this virus, I want to run it on virtual pc.

[silenthunder]

My mom ended up taking it from me while i was out the other night and looked up a tutorial to get rid of it

[EmilKXZ]

If you have a chance to grab the sample, please do an MD5 of the executable.

Perhaps it's been researched before (most likely), and as such, you'll be able to find it easily on live malware repositories.

If you can't do an MD5 of it, just zip it and set the password "infected". Do it like the pro's.

[silenthunder]

If you have a chance to grab the sample, please do an MD5 of the executable.

Perhaps it's been researched before (most likely), and as such, you'll be able to find it easily on live malware repositories.

If you can't do an MD5 of it, just zip it and set the password "infected". Do it like the pro's.

Unfortunately my mom cleaned it as thoroughly as possible and I wasn't allowed to keep it a little longer so I had to return it to my friend. The main think I wanted to know is how she got rid of it, because it'd be a nice addition to my knowledge base, but having that virus and taking out certain elements would be nice for pulling things on my other friends..