-
T-Mobile Home Internet: Revisiting 5G connectivity for the home after two years
-
Multi-million dollar Cheyenne supercomputer auction ends with $480,085 bid — buyer walked away with 8,064 Intel Xeon Broadwell CPUs, 313TB DDR4-2400 ECC RAM, and some water leaks
I recently developed a POSHKODER malware virus on my computer where the virus encrypted all office files. I have Windows 7.
- Thread starter rlaha1
- Start date
Solution
Jacob McIntosh
Honorable
- Aug 24, 2013
- 2,073
- 0
- 12,460
I didn't MAKE the virus. The virus downloaded to my computer when I tried to download one of my files in Dropbox (online storage). The thing is, so far there has not been any fixes available. This virus attacks Word, Excel and Powerpoint files and encrypts them. It has an extension of .POSHKODER at the end of every Office file. I have tried looking on other forums for help, but they have told me that the best bet is to go ahead and format the computer. I was hoping someone else could tell me if they have found a fix yet for this virus?
As far as I know, there are no antivirus programs that can fix it or quarantine it. Any ideas?
As far as I know, there are no antivirus programs that can fix it or quarantine it. Any ideas?
I was using Microsoft Security Essentials, but it never picked up the virus on the full scan. So I am not sure what this virus is. Also, I was trying to download a Word file from my Dropbox to my hard drive as I needed it. As soon as I downloaded it, my computer shut down automatically and restarted without prompting me whether or not I wanted it to shut down. Then when it restarted, I noticed all of my office files had the extension .POSHKODER added and a blue window popped up saying that my files were encrypted. To decode them I would have to pay $300.
IndiGamerTECH
Reputable
- Apr 13, 2014
- 11
- 0
- 4,510
Hi, Depending how the files are encrypted, there is no telling if you will ever access those files again. But if you would want to keep everything, I recommend you download a copy of MBAM 2.0 from www.malwarebytes.org and download the free version. there are no freeware programs downloaded with it, so do not worry. Open Malwarebytes after you downloaded it. Update to the latest version if needed from the Program. Go to the settings tab and click on detection and protection. check the box that says "Scan for rootkits", and check off everything else. Go to the scan page and run a full scan. Remove the found objects and restart if needed. If you have any problems, PLEASE let me know.
IndiGamerTECH
Reputable
- Apr 13, 2014
- 11
- 0
- 4,510
- Apr 6, 2009
- 54,593
- 3,540
- 179,340
You can step through the fix without paying anyone. If you call them for help, it is on you.
This ransome-ware is not a virus, per se. Do you know exactly how you contracted this infection? You stated a file from your Dropbox earlier. Have you deleted/removed that file? Did you share that file with anyone? If so, are they now infected?
This ransome-ware is not a virus, per se. Do you know exactly how you contracted this infection? You stated a file from your Dropbox earlier. Have you deleted/removed that file? Did you share that file with anyone? If so, are they now infected?
IndiGamerTECH
Reputable
- Apr 13, 2014
- 11
- 0
- 4,510
Actually there are many free decryption programs but you have to be careful on what you download to do it. I have never had the need to have to find a program to decrypt files, nor have I heard of one
Like I said before, I needed an word file from my Dropbox, so opened it and found the file. At that time it did not have that extension on my file so I downloaded it. As I downloaded it the computer shut down and when it restarted all of my office and PDF file have that .POSHKODER extension on them. I did not attempt to open up Dropbox after that and no I did not share the file with anyone.
pyr0_m4n
Honorable
- Feb 4, 2013
- 950
- 0
- 11,360
WOT browser addon flags it.
https://www.mywot.com/en/scorecard/blog.teesupport.com?utm_source=addon&utm_content=popup
I don't go to any sites that come up red.
- Apr 6, 2009
- 54,593
- 3,540
- 179,340
Do you have your files backed up anywhere else? If not, I would at least try the removal. You can't get any worse than you are now.
Of course, a clean install on a freshly formatted system will remove the threat altogether.
Of course, a clean install on a freshly formatted system will remove the threat altogether.
Hawkeye22
Glorious
- Feb 10, 2006
- 11,442
- 1
- 49,065
Without the proper encyption key, there is no way for you to decrypt those files. On the plus side, there have been many reports that once the ransom is paid they will send you a program to decrypt your files and everything will be intact.
If the files aren't important to you, then just scrub the hard drive and reinstall windows. I wouldn't even bother with trying to clean the virus off and risk having your files encypted again.
It's events like this that usually motivate people to start making appropriate backups of their data.
If the files aren't important to you, then just scrub the hard drive and reinstall windows. I wouldn't even bother with trying to clean the virus off and risk having your files encypted again.
It's events like this that usually motivate people to start making appropriate backups of their data.
IndiGamerTECH
Reputable
- Apr 13, 2014
- 11
- 0
- 4,510
You may also use hitman pro ( a free ransomware removal tool. Once I get home I can guide you through on how to remove this virus
TRENDING THREADS
-
News Apple debuts M4 processor in new iPad Pros with 38 TOPS on neural engine- Started by Admin
- Replies: 76
-
News Firefox user loses 7,470 opened tabs saved over two years after they can’t restore browsing session
- Started by Admin
- Replies: 58
-
News Intel issues official statement on Core K-series crashes: stick to Intel's official power profiles
- Started by Admin
- Replies: 27
-
Question Sapphire RX 5700 XT Nitro+ is not working in main PCIe slot ?
- Started by digows
- Replies: 24
-
Facebook
Twitter
Instagram