Home / Software & Gaming / Security / Malware taunts you with profanity after deleting your stuff

Malware taunts you with profanity after deleting your stuff

A new piece of malware has been discovered by the crew over at Malwarebytes, which not only specifically targets important file types for deletion, but once it's complete it doesn't stop harassing you. In-fact it waits for one of the affected programs or files to attempt to start and then quite literally says “f*** you!”

Once a victim's PC is infected, the malware, dubbed Trojan.MSIL.ST in malwarebytes software (which is more than capable of clearing out this nasty little fella') searches out file types like: .txt, .doc, .jpg, .rar, .7zip, setup.ext and a handful of other less common ones. Once it's done so, it erases the original and adds the following delightful message:

malware
Such charmers these malware writers

It turns out this particular piece of nasty-ware has been obfuscated with SmartAssembly v6, a piece of commercial software designed to prevent software piracy. +1 for the open source advocates.

Malwarebytes also suggested that this isn't going to be the most rampant trojan ever, so don't be too afraid of it. The fact that it's this vocal bout its presence makes it much easier to detect and therefore is less likely to spread to other machines. It's also pretty uncommon however, as it's more of a prank than an effective malware spreading tool.

KitGuru Says: As usual though, make sure you have offsite backups of your most important files and documents.

Become a Patron!

Check Also

Chinese Steam

Valve confirms Steam has not suffered a data breach

This week, someone claimed to have breached Valve's Steam servers, coming away with account information for over 89 million users. Something seemed a bit fishy about the claim at the time, but now, Valve has confirmed that no data breach has taken place.

We've noticed that you are using an ad blocker.

Thank you for visiting KitGuru. Our news and reviews teams work hard to bring you the latest stories and finest, in-depth analysis.

We want to be as informative as possible – and to help our readers make the best buying decisions. The mechanism we use to run our business and pay some of the best journalists in the world, is advertising.

If you want to support KitGuru, then please add www.kitguru.net to your ad blocking whitelist or disable your adblocking software. It really makes a difference and allows us to continue creating the kind of content you really want to read.

It is important you know that we don’t run pop ups, pop unders, audio ads, code tracking ads or anything else that would interfere with the KitGuru experience. Adblockers can actually block some of our free content, such as galleries!