.docx.swtxrzi file extension

Skunks A friend of mine Office files have a funny extension like the one above .docx.swtxrzi among other extension. is that a virus or what?

I tend to think so, if the doc is saved that way by default by the system. On Mon, Feb 9, 2015 at 4:02 PM, Joseph Maina via skunkworks < skunkworks@lists.my.co.ke> wrote:
Skunks
A friend of mine Office files have a funny extension like the one above .docx.swtxrzi among other extension.
is that a virus or what?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

http://www.altap.cz/ use that to see all the hidden files , if your files are encrypted , check the crypto conversation On Mon, Feb 9, 2015 at 4:13 PM, Brian Monyi via skunkworks < skunkworks@lists.my.co.ke> wrote:
I tend to think so, if the doc is saved that way by default by the system.
On Mon, Feb 9, 2015 at 4:02 PM, Joseph Maina via skunkworks < skunkworks@lists.my.co.ke> wrote:
Skunks
A friend of mine Office files have a funny extension like the one above .docx.swtxrzi among other extension.
is that a virus or what?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- GG

Another RansomWare. guys will get into so much trouble soon On 2/9/15, geoffrey gitagia via skunkworks <skunkworks@lists.my.co.ke> wrote:
use that to see all the hidden files , if your files are encrypted , check the crypto conversation
On Mon, Feb 9, 2015 at 4:13 PM, Brian Monyi via skunkworks < skunkworks@lists.my.co.ke> wrote:
I tend to think so, if the doc is saved that way by default by the system.
On Mon, Feb 9, 2015 at 4:02 PM, Joseph Maina via skunkworks < skunkworks@lists.my.co.ke> wrote:
Skunks
A friend of mine Office files have a funny extension like the one above .docx.swtxrzi among other extension.
is that a virus or what?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- GG
-- -- Gichuki John Ndirangu, C.E.H , C.P.T.P, O.S.C.P I.T Security Analyst and Penetration Tester jgichuki at inbox d0t com {FORUM}http://lists.my.co.ke/pipermail/security/ http://chuksjonia.blogspot.com/

Hehehe...simple, that guy is trying to hide his files from itchy-eyed guys from reading them by extending extensions with funny characters. In short .docx.swtxrzi originally was .docx but he just added .swtxrzi to distract guys. On Mon, Feb 9, 2015 at 4:02 PM, Joseph Maina via skunkworks < skunkworks@lists.my.co.ke> wrote:
Skunks
A friend of mine Office files have a funny extension like the one above .docx.swtxrzi among other extension.
is that a virus or what?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- It is not a million friends that you have that matters but one in a million who is genuine enough to stand by you.

Definitely a ransomware On Wed, Feb 11, 2015 at 3:33 PM, Fredrick Njoroge via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hehehe...simple, that guy is trying to hide his files from itchy-eyed guys from reading them by extending extensions with funny characters. In short .docx.swtxrzi originally was .docx but he just added .swtxrzi to distract guys.
On Mon, Feb 9, 2015 at 4:02 PM, Joseph Maina via skunkworks < skunkworks@lists.my.co.ke> wrote:
Skunks
A friend of mine Office files have a funny extension like the one above .docx.swtxrzi among other extension.
is that a virus or what?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- It is not a million friends that you have that matters but one in a million who is genuine enough to stand by you.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

what is the solution skunks On 13 Feb 2015 19:41, "Nicholas A via skunkworks" <skunkworks@lists.my.co.ke> wrote:
Definitely a ransomware
On Wed, Feb 11, 2015 at 3:33 PM, Fredrick Njoroge via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hehehe...simple, that guy is trying to hide his files from itchy-eyed guys from reading them by extending extensions with funny characters. In short .docx.swtxrzi originally was .docx but he just added .swtxrzi to distract guys.
On Mon, Feb 9, 2015 at 4:02 PM, Joseph Maina via skunkworks < skunkworks@lists.my.co.ke> wrote:
Skunks
A friend of mine Office files have a funny extension like the one above .docx.swtxrzi among other extension.
is that a virus or what?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- It is not a million friends that you have that matters but one in a million who is genuine enough to stand by you.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke

Told ya, thats a crypto, thats how it MO. On 2/13/15, Joseph Maina via skunkworks <skunkworks@lists.my.co.ke> wrote:
what is the solution skunks On 13 Feb 2015 19:41, "Nicholas A via skunkworks" <skunkworks@lists.my.co.ke> wrote:
Definitely a ransomware
On Wed, Feb 11, 2015 at 3:33 PM, Fredrick Njoroge via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hehehe...simple, that guy is trying to hide his files from itchy-eyed guys from reading them by extending extensions with funny characters. In short .docx.swtxrzi originally was .docx but he just added .swtxrzi to distract guys.
On Mon, Feb 9, 2015 at 4:02 PM, Joseph Maina via skunkworks < skunkworks@lists.my.co.ke> wrote:
Skunks
A friend of mine Office files have a funny extension like the one above .docx.swtxrzi among other extension.
is that a virus or what?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- It is not a million friends that you have that matters but one in a million who is genuine enough to stand by you.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- -- Gichuki John Ndirangu, C.E.H , C.P.T.P, O.S.C.P I.T Security Analyst and Penetration Tester jgichuki at inbox d0t com {FORUM}http://lists.my.co.ke/pipermail/security/ http://chuksjonia.blogspot.com/

Told ya, thats a crypto, thats its MO. On 2/13/15, Gichuki John Chuksjonia <chuksjonia@gmail.com> wrote:
Told ya, thats a crypto, thats how it MO.
On 2/13/15, Joseph Maina via skunkworks <skunkworks@lists.my.co.ke> wrote:
what is the solution skunks On 13 Feb 2015 19:41, "Nicholas A via skunkworks" <skunkworks@lists.my.co.ke> wrote:
Definitely a ransomware
On Wed, Feb 11, 2015 at 3:33 PM, Fredrick Njoroge via skunkworks < skunkworks@lists.my.co.ke> wrote:
Hehehe...simple, that guy is trying to hide his files from itchy-eyed guys from reading them by extending extensions with funny characters. In short .docx.swtxrzi originally was .docx but he just added .swtxrzi to distract guys.
On Mon, Feb 9, 2015 at 4:02 PM, Joseph Maina via skunkworks < skunkworks@lists.my.co.ke> wrote:
Skunks
A friend of mine Office files have a funny extension like the one above .docx.swtxrzi among other extension.
is that a virus or what?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- It is not a million friends that you have that matters but one in a million who is genuine enough to stand by you.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- -- Gichuki John Ndirangu, C.E.H , C.P.T.P, O.S.C.P I.T Security Analyst and Penetration Tester jgichuki at inbox d0t com
{FORUM}http://lists.my.co.ke/pipermail/security/ http://chuksjonia.blogspot.com/
-- -- Gichuki John Ndirangu, C.E.H , C.P.T.P, O.S.C.P I.T Security Analyst and Penetration Tester jgichuki at inbox d0t com {FORUM}http://lists.my.co.ke/pipermail/security/ http://chuksjonia.blogspot.com/
participants (7)
-
Brian Monyi
-
Fredrick Njoroge
-
geoffrey gitagia
-
Gichuki John Chuksjonia
-
Joseph Maina
-
Mark Kipyegon
-
Nicholas A