Hi All,
Received file (prozellanfabrik_frauenthal_gesmbh.cab) in the email attachment. After extracting the .cab file found one .scr file, when double click which opened in MS Word by default and then system got sluggish and hanged. And after few moment all the word, excel, ppt, pdf, text and zip files extension changed with “ubvleva”. Then we have tried to open file by renaming the extensions to original but none of the file accessed, even tried system restore
We have SEP 12x at our office which doesnt catch the Virus/Torjan at that moment. But at evening the Virus got detected by auto protect automatically and pop-up with virus name called “Dowloader.Ponik” for the same virus file which I got through email, which I have kept for assessing/R&D.
Kindly help to decrypt those files.
Regards!
S.Kashif.Ali