We understand that it can be both frustrating and anxiety-inducing if you learn that a Trojan such as the insidious Recorded You has entered your personal or work computer and is currently residing in it. However, the fact that you are aware of the malware’s presence in the machine is good news, really. Most Trojans are rather difficult to notice – something that’s especially true for newer threats like Recorded You, “Drive by exploit”, 1nCuB0. A good antivirus may keep you safe from Trojans that are already in its database but new infection like the one we are focusing on right now are likely to slip past the security tools that most users may have because the protection software may be unable to recognize the new threat as it is has not yet been added to its malware definitions. This is, in fact, why it is important to have antivirus and/or anti-malware programs that get daily updates and that have some form of heuristic protection – a feature that can help with the detection of threats that are not in the security tool’s database yet.

 Anyway, the main topic of this post is Recorded You, and if this is indeed the malware piece you are presently dealing with, let us tell you a bit more about the potential harm that you may face if you don’t remove the infection on time.

Trojan Horse versatility – why they can be so unpredictable

The goal of a given Trojan Horse infection may oftentimes remain a mystery to the users that have been attacked – at least until the effects of the infection become obvious. This is because a Trojan is a tool for cyber crimes that may possess great versatility. It can be used for personal espionage, for online banking thefts, for the distribution of other threatening programs like Ransomware, for stealing sensitive data from the attacked machine, and many, many more.

 Once a virus of this type enters the computer of its victim, it typically needs to gain Admin rights in order to have access and control over the whole system. To achieve this, however, the Trojan typically needs its victim to make a mistake. Typically, this mistake comprises the interaction with the Trojan itself – the execution of the file that carries it. This is why most Trojans are disguised when they first get introduced into the computer – disguised as the installer of some cool game or some expensive program (that is now free), or as some other piece of data, which the user may be tempted to interact with. Typically, pirate sites are known for spreading such pieces of data, which could be potential carriers of Trojans like Recorded You. However, there are other distribution methods for Trojans – spam messages, misleading web ads, clickbait banners, and so on and so forth. And, as we said, even a good antivirus may not always be able to detect all potential threats, which is why you really need to look out for yourself while on the Internet. As for the removal of Recorded You, follow the instructions below and you should be able to take care of this threat.

SUMMARY:

[add_third_banner]

Remove Recorded You Email 

1: Preparations

Note: Before you go any further, we advise you to bookmark this page or have it open on a separate device such as your smartphone or another PC. Some of the steps might require you to exit your browser on this PC.

2: Task Manager

Press Ctrl + Shift + Esc to enter the Task Manager. Go to the Tab labeled Processes (Details for Win 8/10). Carefully look through the list of processes that are currently active on you PC.

If any of them seems shady, consumes too much RAM/CPU or has some strange description or no description at all, right-click on it, select Open File Location and delete everything there.

Also, even if you do not delete the files, be sure to stop the process by right-clicking on it and selecting End Process.

3: IP related to Recorded You

Go to c:\windows\system32\drivers\etc\hosts. Open the hosts file with notepad.

Find where it says Localhost and take a look below that. 

If you see any IP addresses there (below Localhost) send them to us here, in the comments since they might be coming from the Recorded You.

[add_forth_banner]

4: Disable Startup programs

Re-open the Start Menu and type msconfig.

Click on the first search result. In the next window, go to the Startup tab. If you are on Win 10,  it will send you to the Startup part of the task manager instead, as in the picture:

If you see any sketchy/shady looking entries in the list with an unknown manufacturer or a manufacturer name that looks suspicious as there could be a link between them and Recorded You , disable those programs and select OK.

5: Registry Editor

Press Windows key + R and in the resulting window type regedit.

Now, press Ctrl + F and type the name of the virus.

Delete everything that gets found. If you are not sure about whether to delete something, do not hesitate to ask us in the comments. Keep in mind that if you delete the wrong thing, you might cause all sorts of issues to your PC.

6: Deleting potentially malicious data – Recorded You

Type each of the following locations in the Windows search box and hit enter to open the locations:

%AppData%

%LocalAppData%

%ProgramData%

%WinDir%

%Temp%

Delete everything you see in Temp linked to Recorded You Email. About the other folders, sort their contents by date and delete only the most recent entries. As always, if you are not sure about something, write to us in the comment section.

The post Remove Recorded You Email appeared first on Malware Complaints.

About 1nCuB0 Email Hacker Scam

Administrator rights or privileges is the clearance that only the Admin profiles in a given computer have. There are many commands and activities that only an Admin profile can initiate. The goal of many Trojans is to gain this level of clearance inside the computers that they attack, as this would then allow them to do pretty much everything that the computer’s Admin can. This includes but is not limited to downloading and installing new software, uninstalling programs that are in the computed, deleting and modifying system files, stopping certain processes (normally ones that are of high importance), and so on and so forth. Basically, if a Trojan like 1nCuB0 manages to gain this elevated level of privileges in the computer, it could allow to hackers behind it to do whatever they want with the infected machine. For example, the criminals may initiate a crypto-mining process or a spam -distribution one, which drain all of your system’s resources and make your computer almost unusable. In other cases, the Trojan may be used to access your private data, steal your banking details, personal files, and so on. Such information could then, of course, be used in all kinds of harmful and illegal ways – banking account thefts, blackmailing, emotional harassment, and many more. In many instances, the victim may learn about the Trojan attacks days, weeks, and even months after the malware has already completed its nefarious job.

 If you, however, have managed to detect 1nCuB0 or N1ghtm4r3 in your computer, you can consider yourself lucky – now you know what’s going on and could do something about it. The place where we advise you to start is the guide for removing 1nCuB0 you will find right below – complete the steps there and if for some reason this isn’t enough to liberate your machine from the Trojan, you could also try out the professional removal and system security tool that we have linked on this page.

1nCuB0 SUMMARY:

[add_third_banner]

1nCuB0 Email Hacker Scam Removal

1: Preparations

Note: Before you go any further, we advise you to bookmark this page or have it open on a separate device such as your smartphone or another PC. Some of the steps might require you to exit your browser on this PC.

2: Task Manager

Press Ctrl + Shift + Esc to enter the Task Manager. Go to the Tab labeled Processes (Details for Win 8/10). Carefully look through the list of processes that are currently active on you PC.

If any of them seems shady, consumes too much RAM/CPU or has some strange description or no description at all, right-click on it, select Open File Location and delete everything there.

Also, even if you do not delete the files, be sure to stop the process by right-clicking on it and selecting End Process.

3: IP related to 1nCuB0

Go to c:\windows\system32\drivers\etc\hosts. Open the hosts file with notepad.

Find where it says Localhost and take a look below that. 

If you see any IP addresses there (below Localhost) send them to us here, in the comments since they might be coming from the 1nCuB0.

[add_forth_banner]

4: Disable Startup programs

Re-open the Start Menu and type msconfig.

Click on the first search result. In the next window, go to the Startup tab. If you are on Win 10,  it will send you to the Startup part of the task manager instead, as in the picture:

If you see any sketchy/shady looking entries in the list with an unknown manufacturer or a manufacturer name that looks suspicious as there could be a link between them and 1nCuB0 , disable those programs and select OK.

5: Registry Editor

Press Windows key + R and in the resulting window type regedit.

Now, press Ctrl + F and type the name of the virus.

Delete everything that gets found. If you are not sure about whether to delete something, do not hesitate to ask us in the comments. Keep in mind that if you delete the wrong thing, you might cause all sorts of issues to your PC.

6: Deleting potentially malicious data – 1nCuB0

Type each of the following locations in the Windows search box and hit enter to open the locations:

%AppData%

%LocalAppData%

%ProgramData%

%WinDir%

%Temp%

Delete everything you see in Temp linked to 1nCuB0 Ransomware. About the other folders, sort their contents by date and delete only the most recent entries. As always, if you are not sure about something, write to us in the comment section.

The post Remove 1nCuB0 Email Hacker Scam appeared first on Malware Complaints.