Reggia99

So should I still go ahead to scan it? I believe you could help out in case of re infection

I have an external hard drive infected by the ransomware and I believe the re-encrypting program is still on it, how do I get rid of it without infecting my free laptop? Please bear in mind that I have the EEK, adwcleaner, on the PC now. Is it safe for me to connect it to my laptop and scan with the EEK? or what would you advise?

@Kevin Zoll Kindly help me check this out, it is the text file I got after running the STOPdecrypter with connection to the internet this time. I had to make it a zip file because it's heavier than your upload limit here.

I was able to run the STOP decrypter after running the Adwcleaner, and the attached file is the log i save from the decrypter. Meanwhile i can connect to emsisoft website now STOPlogg.zip

see attached the logs, AdwCleaner[C00].txt AdwCleaner[S00].txt AdwCleaner_Debug.log

Idm had been removed already, even before I made the last report, I don't know if there's something I'm not doing right.

@Amigo-A please I don't get your message, kindly explain.

No antivirus at all on the PC, but I noticed that even while I was connected to the internet and I could access other websites, I could not open emsisoft website except when I use a VPN, but the VPN service I normally used was removed by the fix @Kevin Zoll told me to run in other to get rid of the re-encrypting ransomware. So maybe you can enlighten me more on how to circumvent this.

No antivirus at all on the PC, but I noticed that even while I was connected to the internet and I could access other websites, I could not open emsisoft website except when I use a VPN, but the VPN service I normally used was removed by the fix @Kevin Zoll told me to run in other to get rid of the re-encrypting ransomware. So maybe you can enlighten me more on how to circumvent this.

I was connected

See attached the log after running the STOPdecrypter STOP log.txt

Attached is the extended details of the crash

I couldn't run the STOPdecrypter, i keep receiving this feedback what is wrong please?

You mean I should run the STOP decrypter now? If yes, kindly drop link to download here. Thanks

@Kevin Zoll I'm still waiting for your response. Thanks

See Fixlog-1.txt

I'm on it

@Kevin Zoll i think it might be of use to let you know I renamed a file which is suspected to be the ransomware executable file, kindly put this in mind because I really do not want any trace of the malware on my PC once you take me through the file decryption process. Thanks again.

see attached the latest scan log Addition.txt FRST.txt

Alright, I will do that immediately

Thanks @Amigo-A

I saw the file and renamed it as shown below, further I opened the file and saw an application file which is 0kb in size, I didn't delete it though in case it will still be need for decrypting my files.

Fixlog.txt

@Kevin Zoll Attached is the fix log, I was able to run the FRST somehow at last, please review as soon as you can. Thanks.

@Kevin ZollZoll, @Amigo-A The virus encrypts even the FRST and the fixlist on the flashdrive so using it to fix is becoming another issues, What do I do in this situation