Perky_boy

Member
  • Content Count

    6
  • Joined

  • Last visited

Community Reputation

0 Neutral

About Perky_boy

  • Rank
    New Member
  1. Again, thanks so much for the assistance. I wish I could buy you a beer or something for your trouble. Have a great holiday season!!
  2. Here are the logs EEK and FRST logs and the Decrypter output showing the 4 files I mentioned. scan_161203-120753.txt Fixlog.txt decrypter.txt
  3. OK, I have not worked with cleaning a lot of Viruses lately (I'm an Old School Mac-Head) but these logs look promising to me. question: are the encrypted files just locked, or are they carriers of the virus also? (asking because I have 4 of them left. 2 I need to find replacements for and kept 2 to trigger the decrypter to run) Thank again, a thousand times!! Fixlog.txt scan_161201-200226.txt
  4. Thank again for the Help!! I went back and started the whole process again just to make sure that you get the most up to date information. As I was searching for samples to run through the decoder I noticed there are several files that seemed to have been decrypted but the encrypted file still exists in the same folder. Can I just dump the encrypted version or is this some crafty ploy by the virus to trick me into re-infecting the system? Addition.txt decrypter log2.txt Fixlog.txt FRST.txt
  5. Hello!! Thanks for the reply and the direction on this issue. I have run the Decrypter about 8-10 times using different source files, each time it apears to find the same encryption keys but it does not crack all the files. When I run the decrypter on the remaining files it still seems to find the same keys. I have attached the most recent key and log file returned. Should I just go ahead with the remaining steps or keep trying the decrypter until all are un-encrypted? THANKS AGAIN FOR THE HELP. decrypter log8.txt
  6. I am working on my mother's computer and it is VERY infected with the '.crypted' virus. I have attached the scan logs mentioned in the Start Page from EEK and FRST to this post, Any assistance would be greatly appreciated.scan_161122-213055.txtFRST.txtAddition.txt