ncov ransomware using Everything to generate a list of filenames to encrypt

General discussion related to "Everything".
Post Reply
void
Developer
Posts: 16897
Joined: Fri Oct 16, 2009 11:31 pm

ncov ransomware using Everything to generate a list of filenames to encrypt

Post by void »

A couple users have reported Everything was included in a nvoc ransomware attack.
It is possible Everything was used on compromised systems and is unrelated to nvoc.

Ncov ransomware removal instructions:
https://www.pcrisk.com/removal-guides/17063-ncov-ransomware

Everything.exe appears to renamed to e.exe

The version appears to be 1.4.1.932

The malware includes an Everything.ini that is set to index drives a: to z:
vsub
Posts: 475
Joined: Sat Nov 12, 2011 11:51 am

Re: ncov ransomware using Everything to generate a list of filenames to encrypt

Post by vsub »

I really hate those kind of people
Don't they have anything better to do than making the life on normal people more difficult than it is now
Post Reply