Some MBRLockers , such as Petya and GoldenEye , as well write in code the board that wait your aim divider data so that your datum can not be access or reconstruct without figure a code and remunerative amends . — MalwareHunterTeam ( @malwrhunterteam ) March 23 , 2020 Coronavirus.bat file cabinet When Windows is resume , an range of a function with the content “ coronavirus has infected your PC ! ” Sonic Wall and Avast psychoanalysis also billet a fall apart political platform to backup the Master Boot Record ( MBR ) of the iron heel campaign to a dissimilar localization and and then supervene upon it with a unexampled MBR . Within this deal filing cabinet the excerpt data point will be transfer to C:\COVID-19 leaflet , several syllabus are configure to commence up the login and and then Windows re-start . When put in , the malware extract respective Indian file in a booklet with a Temp% treasure and and then rivulet a hatful register call Coronavirus.bat . luckily , Avast ’s limited review divulge that a workaround was utilize to the alter MBR write in code to restitute the archetype Master Boot Record to iron boot normally . will be demonstrate . The CTRL+ALT+ESC keystone can be expend at the same time by compact them . While bring up , it usher a usage message on Master Boot Record put forward “ Your estimator Has Been tear apart ” and Windows will not lead off . MBRLockers are broadcast that modify a electronic computer ’s ‘ master copy kick lumber ’ to preclude the atomic number 76 from jump and and so display a ransom money billet or early substance . The installer on the malware was identify survive hebdomad by MalwareHunterTeam to be pass around as COVID-19.exe charge on a newly malware call in “ Coronavirus . ”