Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

SPORT extension


  • Please log in to reply
12 replies to this topic

#1 matrixdu

matrixdu

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Croatia
  • Local time:05:56 AM

Posted 05 February 2016 - 03:21 PM

Recently all my doc and jpg files turned extension to SPORT ? Now I have for example 100_2604.JPG.sport and it can not be opened.About 5 gb of photoes become useless...any help,advice ?



BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,271 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:56 AM

Posted 05 February 2016 - 04:59 PM

I have advised our Security Colleagues who specialize in crypto malware ransomware with a link to this topic.

Did you find any ransom note? These infections are created to alert victims that their data has been encrypted and demand a ransom payment. Check your documents folder for an image the malware typically uses for the background note. Check the C:\ProgramData (or C:\Documents and Settings\All Users\Application Data) for a randomly named .html, .txt, .png, .bmp, .url file.

Please submit samples of any encrypted files and ransom notes here (http://www.bleepingcomputer.com/submit-malware.php?channel=3) with a link to this topic.

You can also submit samples of any suspicious executables (installer, malicious files, attachments) that you suspect were involved in causing the infection. Doing that will be helpful with analyzing and investigating by our crypto experts.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#3 matrixdu

matrixdu
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Croatia
  • Local time:05:56 AM

Posted 05 February 2016 - 05:21 PM

thanks for reply ,no ransom note found and no such files .html, .txt, .png, .bmp, .url file. in directories ,double checked.Sample submitted

Total over 20 gb of photoes corrupted.......all I ever had....unfortunately  did not make backup on external hdd ;-(



#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,271 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:56 AM

Posted 05 February 2016 - 05:58 PM

That's a lot of photos. Hopefully the sample will tell us something.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 matrixdu

matrixdu
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Croatia
  • Local time:05:56 AM

Posted 05 February 2016 - 06:08 PM

i truly hope so,all I ever had ,years of collecting,family/work photos



#6 matrixdu

matrixdu
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Croatia
  • Local time:05:56 AM

Posted 21 February 2016 - 03:00 PM

Any news maybe ?

#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,271 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:56 AM

Posted 21 February 2016 - 03:09 PM

None that I have heard about.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#8 matrixdu

matrixdu
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Croatia
  • Local time:05:56 AM

Posted 23 February 2016 - 02:14 PM

thanks for reply



#9 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,271 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:12:56 AM

Posted 23 February 2016 - 02:55 PM

No problem. If a solution is discovered, that information will be provided here and you will receive notification if subscribed to this topic. In addition, a news article most likely will be posted on the BleepingComputer front page.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#10 Demonslay335

Demonslay335

    Ransomware Hunter


  • Security Colleague
  • 3,472 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:11:56 PM

Posted 29 March 2016 - 05:24 PM

Do you have a sample of the malware that hit you by chance? You can scan with MalwareBytes and HitmanPro to find anything suspicious if your antivirus didn't already pick up on anything. We may need the malware itself to see what it is. There usually is a ransom note as well with payment instructions, might be in your My Documents.


logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic]

ransomnotecleaner-25.png RansomNoteCleaner - Remove Ransom Notes Left Behind [Support Topic]

cryptosearch-25.pngCryptoSearch - Find Files Encrypted by Ransomware [Support Topic]

If I have helped you and you wish to support my ransomware fighting, you may support me here.


#11 matrixdu

matrixdu
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Croatia
  • Local time:05:56 AM

Posted 29 March 2016 - 09:01 PM

sorry but no ransome note found or anything suspicious.no problems with windoes or something like that.only file extension changes to .sport.wierd or strange ? maybe both.



#12 Demonslay335

Demonslay335

    Ransomware Hunter


  • Security Colleague
  • 3,472 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:11:56 PM

Posted 30 March 2016 - 09:12 AM

Any chance there are any encrypted files that you have a clean copy of so we can compare them? If you have an encrpted picture in the Public folder, I can get clean copies online. You may share them by uploading to SendSpace and sharing the link here.


logo-25.pngID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic]

ransomnotecleaner-25.png RansomNoteCleaner - Remove Ransom Notes Left Behind [Support Topic]

cryptosearch-25.pngCryptoSearch - Find Files Encrypted by Ransomware [Support Topic]

If I have helped you and you wish to support my ransomware fighting, you may support me here.


#13 matrixdu

matrixdu
  • Topic Starter

  • Members
  • 9 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Croatia
  • Local time:05:56 AM

Posted 30 March 2016 - 09:29 AM

unfortunattely I don't have clean copy of infected files and that the reason for trying to clean infected files somehow,zhanks for help






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users