Haber, discussion of the new scheme of work of the crypto ransomware

SergioBarbery: Creating empty files %AppData%\been_here and %AppData%\server_step_one won't fit as a vaccine? Or is there any data?

Prototik: Enough empty been_here, the code is on the screenshot.

AVX: And the next version will check something else, and seeing only these files, will erase everything to the hell and show a picture of the type of cook-racist.jpg :-)

mwizard: What about compatibility with previous versions? I’ve sold it all out, support it.

Sergarcada: “There are 3 updates for your virus. And options: update and restart, postpone for 10 minutes, postpone for 4 hours, install Windows 10.