Etheria & Aetheria

[Maxxi]

Everyone who ran mdftDecrypter.exe is now infected with a remote access tool.  I'd recommend you go offline, backup your data and reformat.  Do not keep any executables.

glad i didn't run this stuff.

[Ad Bot]

[Biostorm]

Wait wtf happened. I clicked both links, but I didn't download anything, I'm safe right?

[Trogtor]

Wait wtf happened. I clicked both links, but I didn't download anything, I'm safe right?

Ok, since I know ALL of you were begging for the soundtrack, I've uploaded it here.
<link removed>

User was banned for this post

[Maxxi]

Well, the virustotal of the exe file the readme links to is here: https://www.virustotal.com/en/file/a8ff1e82b45d5a0048e75be255eebbdc73b463bcd8d201ae1cb197539be1eb5a/brown townysis/1420253104/

It creates two files
C:\DOCUME~1\<USER>~1\LOCALS~1\Temp\ytmp\tmp33507.bat (successful)
C:\DOCUME~1\<USER>~1\LOCALS~1\Temp\ytmp\tmp95157.exe (successful)

and then runs them.

So yeah, no, i'm not running this stuff.

"DarkKomet"



Uh guys
he just infected you all with loving darkcomet, he created a stub and it creates files to forget up your stuff

[Alternat¡ve]

darkkomet is rat software

[Camel]

darkkomet is rat software

[Naked Human]

So were gonna get raped now?

[Quote Story]

so any reasons why op decided to go digitally postal?

[Maxxi]

darkkomet is rat software

yea i knew that

[Epicduke]

wait so how do i get to the directory?

[Maxxi]

wait so how do i get to the directory?

what directory?
did you run it or something?

[King of the Bill]

Posting from phone. Will malwarebytes get rid of this?

[Alternat¡ve]

yea i knew that

k dont go all furrinational socialist on me

[Ipquarx]

Posting from phone. Will malwarebytes get rid of this?

it should, yeah

[Nal]

Posting from phone. Will malwarebytes get rid of this?

rkill and mbam
https://blog.malwarebytes.org/intelligence/2012/06/you-dirty-rat-part-1-darkcomet/
malwarebytes explains what it is, also it can pick it up if people don't want to do a format iirc