ncov ransomware using Everything to generate a list of filenames to encrypt

General discussion related to "Everything".
Post Reply
void
Site Admin
Posts: 5367
Joined: Fri Oct 16, 2009 11:31 pm

ncov ransomware using Everything to generate a list of filenames to encrypt

Post by void » Thu Apr 30, 2020 4:26 am

A couple users have reported Everything was included in a nvoc ransomware attack.
It is possible Everything was used on compromised systems and is unrelated to nvoc.

Ncov ransomware removal instructions:
https://www.pcrisk.com/removal-guides/17063-ncov-ransomware

Everything.exe appears to renamed to e.exe

The version appears to be 1.4.1.932

The malware includes an Everything.ini that is set to index drives a: to z:

vsub
Posts: 308
Joined: Sat Nov 12, 2011 11:51 am

Re: ncov ransomware using Everything to generate a list of filenames to encrypt

Post by vsub » Thu Apr 30, 2020 9:49 am

I really hate those kind of people
Don't they have anything better to do than making the life on normal people more difficult than it is now

Post Reply