Jump to content


  • Posts

  • Joined

  • Last visited


0 Neutral


Recent Profile Visitors

14,760 profile views
  1. This is Qlocker. We have information on it here: https://www.bleepingcomputer.com/news/security/massive-qlocker-ransomware-attack-uses-7zip-to-encrypt-qnap-devices/ Sadly, no free decryption at this time.
  2. That csrss.exe does not have a valid digital signature when it should, which is why Rkill is killing it. I do need to modify Rkill, though, so that it does not kill the files even if unsigned. For now, though, what you told me and send me indicates that something suspicious is going on with the csrss.exe file and it should be investigated. I will let AdvancedSetup continue from here. Thanks
  3. Can you submit C:\WINDOW\system32\csrss.exe to http://www.bleepingcomputer.com/submit-malware.php?channel=3
  4. What is the name of the rkill program you downloaded? Rkill.exe or iexplore.exe? If its iexplore.exe, substitute rkill.exe with iexplore.exe in the command i gave you above.
  5. Is Rkill on the desktop? If so, try the same steps but instead use this command: "%userprofile%\desktop\rkill.exe" -d Notice the addition of the quotes.
  6. Hi bluegiraffe, I spoke to AdvancedSetup about jumping in here and seeing why Rkill is crashing. If you dont mind, can you run Rkill with the debug flag using -d as the argument when you run it. To do this, please follow these instructions: Click on Start and Select Run. Then in the open field type %userprofile%\desktop\rkill.exe -d. Please note that there is a space between the rkill.exe and the -d. Once you do that, Rkill will start in debug mode and list each process and wait for you to hit enter before analyzing it. What I want you to do is keep tracking of the full process name shown before the blue screen happens. For example, if rkill display C:\Windows\notepad.exe, prompts you to press any key to continue. and then blue screens after you press a key, then please come back and tell me it was C:\Windows\notepad.exe Let me know if you need any help understanding the above. Thanks!
  7. Congrats to Marcin and the rest of the Malwarebytes staff for the 2.0 release.
  8. I didn't see one post listing all the problems people are having so I apologize if some of these are duplicates. These issues are with FireFox 9.0.1. If you edit a post, the edit box can sometimes be tiny and other times the normal size. I have not seen a rhyme or reason for it. When you view a PM under My Conversations, instead of the conversation appearing to the right of the Participants and invite participants boxes, it appears underneath them. Also, if one of the reasons for this skin update was for SEO, I am curious as to your reasoning for enabling the friendly urls in IPB?
  9. Hi All, Not much I can do about bleepingcomputers.com. Its owned by a typo cybersquatter.
  10. Wrote about it yesterday as well: http://www.bleepingcomputer.com/forums/topic268858.html I think its fairly obvious where the security community stands behind this matter as seen by the overwhelming support shown in this topic.
  11. Just checked the site and we are not displaying anything from that ip range. Maybe one of the devs can chime in and let you know what that ip is blocked for.
  12. Can you please tell me the exact error message you are getting?
  13. Though that topic was created a while back, it is updated regularly. It is a hard process keeping all of those 100% up to date considering how often the programs change. We do what we can and rely on people telling us we need to update it. So, thank you! Bitdefender instructions have now been updated.
  14. Are these the ones where when you go to the site inquestion, shows a dialog box saying flash is outdated?
Back to top
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.