Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

ZOVXLZH extension attached to ALL my photos ?!

photos extensions zovxlzh

  • Please log in to reply

#1
briguy700

briguy700

    New Member

  • Member
  • Pip
  • 2 posts

I recently took to cleaning up an older computer of mine (Windows Vista, Dual Core, 1.2 GHZ, HP), so that I could retrieve the photos that were on it to back them up to another medium. After running Norton on it to clean things up and remove some apparent malware and registry errors, the computer seemed to be running fine and I set to preparing to copy the photos. When I clicked to open a photo, I was given a notice that Internet Explorer did not recognize or could not open the file. It asked if I wanted to search for a program to open it. At that time I checked the properties of the photo and noticed it had a filename / extension similar to this (Example: partyphoto1.jpg.zovxlzh). I have zero idea where the zovxlzh came from !! I tried googling it and did find something about lzh files being compressed files ?? However I never ran any compression utility and these are not whole file folders, but individual photos. Upon further examination, every single photo on my computer (1000 plus) has that same extension. There seems to be no options to resave them as .jpg

 

Is there anyone out there that understands what's going on and can help me get my files back to normal. There are a lot of important pictures on there of family, life experiences, etc, which is why I was doing this in the first place. The last time I accessed these photos they were all simple .jpg files, but now all have the ZOVXLZH attached as well. Please help if you can, and I will be so very grateful !!

 

Much appreciation !!

 

Briguy700


Edited by briguy700, 25 September 2015 - 09:14 AM.

  • 0

Advertisements


#2
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,010 posts
  • MVP

Note:  Did some more research and it's a variant of Cryptolocker.
There is a website that might help:
 
http://www.bbc.com/n...nology-28661463
 
Let's see if the infection is still active.
 
Please download Farbar Recovery Scan Tool and save it to your Desktop.
 
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
 
 

  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • click on the Addition.txt box.
  • Press Scan button.
  • It will produce a log called FRST.txt in the same directory the tool is run from.
  • Please copy and paste that log back here and also the second log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
     

  • 0

#3
briguy700

briguy700

    New Member

  • Topic Starter
  • Member
  • Pip
  • 2 posts

 

Note:  Did some more research and it's a variant of Cryptolocker.
There is a website that might help:
 
http://www.bbc.com/n...nology-28661463
 
Let's see if the infection is still active.
 
Please download Farbar Recovery Scan Tool and save it to your Desktop.
 
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
 
 

  • Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  • click on the Addition.txt box.
  • Press Scan button.
  • It will produce a log called FRST.txt in the same directory the tool is run from.
  • Please copy and paste that log back here and also the second log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.
     

 

I'll do that as soon as I get home after work. Thanks so much for your response and your time. After the scan, should I then contact the site on the link or reply here as to what it said ?? I really appreciate this !!!


  • 0

#4
RKinner

RKinner

    Malware Expert

  • Expert
  • 20,010 posts
  • MVP

Go ahead and try uploading one of your files.  If you are lucky and this is an old infection then they may be able to help.  The site is from about a year ago so if it's a new infection it may not be in their database.  We still need to make sure the infection is gone.  Usually it self destructs after encrypting all of your files but sometimes it stays resident.


  • 0






Similar Topics


Also tagged with one or more of these keywords: photos, extensions, zovxlzh

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP