deraconteur 0 Posted May 3, 2020 Report Share Posted May 3, 2020 Good day, developers! Please my notebook is infected with a ransomware. I have run the two applications and here are the reports. Please can you help me? The files that are encrypted are very important to me. Thank you. FRST.txt Addition.txt scan_200502-202711.txt Quote Link to post Share on other sites
Amigo-A 136 Posted May 4, 2020 Report Share Posted May 4, 2020 Yes, malware is active on your system and loads with it. First you need to leave only one antivirus in the system. It must be 100% active and updated. It can be avast or Emsisoft Anti-Malware. This is necessary so that the antivirus switches to 100% protection mode. You also need to remove Hacktool.KMSAuto. While it is in your system, it can be the source of one of the infektsitsy or contain a backdoor or downloader. Quote Link to post Share on other sites
Amigo-A 136 Posted May 4, 2020 Report Share Posted May 4, 2020 After completing these steps, make a new scan and attach new logs to the your new message. Forum support specialists will tell you what to do next. Quote Link to post Share on other sites
GT500 873 Posted May 5, 2020 Report Share Posted May 5, 2020 On 5/2/2020 at 11:00 PM, deraconteur said: Please my notebook is infected with a ransomware. I have run the two applications and here are the reports. Please can you help me? The system is infected with a rootkit. I'm going to talk to other members of our team to verify which rootkit we're dealing with here before I try to help you remove it. Quote Link to post Share on other sites
GT500 873 Posted May 6, 2020 Report Share Posted May 6, 2020 @deraconteur please download RogueKiller by Adlice Software and move/copy it to your Desktop (don't open or run it from your web browser). Right-click on the RogueKiller icon you copied to your Desktop and select Run as Administrator. Select the language to use during the RogueKiller installation. Click on Next to continue the installation. Follow the on-screen prompts to install RogueKiller. When the installation is complete, click Finish. RogueKiller will launch automatically. Accept the license agreement, then click the Scan button in the left pane. Under the Standard Scan header, click Start to begin the scan. When the scan is complete, click the Report button. Do not click "Removal"! Click Export > Text file. Save the report to your desktop as RogueKillerLog.txt Click OK, then close RogueKiller. Attach the RogueKillerLog file to a reply for me to review. Note: The above instructions were borrowed from BleepingComputer.com, so if they are not up to date them please let me know and I will try to update them for you. Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.