Create encrypted copies of your files with an .htm extension.
: The archive typically contains a collection of compiled Python and .dll files along with an executable file—often named confetti.exe or brulyies.exe .
Launch a ransom screen in your browser demanding payment to restore access. Community Experience sc24337-EPS.rar
: Only download media from reputable, official sources.
Based on community reports, the file is a highly suspicious archive and is widely identified as malware or ransomware . It is often found on public indexers and pirate sites, frequently masquerading as a download for upcoming or "future" episodes of popular TV shows. Review: Safety Warning Create encrypted copies of your files with an
: Be wary of video downloads that contain .exe , .dll , or .pyc files, as these are executable scripts, not video data. Have you already extracted the file, or PSA - Beware virus downloads of FUTURE episodes. : r/sonarr
“What it is doing is marking all your files hidden, then creating another infected/encrypted copy with the .htm extension that is opening in your browser to request ransom.” Reddit · r/sonarr · 1 year ago How to Stay Safe Community Experience : Only download media from reputable,
: While some scanners may initially miss it, security software like Malwarebytes identifies it as "malware-ai". It has been reported to: Mark your existing files as hidden .