A couple of weeks ago my system got hit with the above stated ransomware.
I was able to get it booted up in safe mode and as I had many maleware tools already loaded on my system I was able to clean the infection (or so I thought).
I had combofix, malewarebytes etc...
However I am getting .tmp files daily that are found by Symantec as a virus:
The temp files are always located located in the C;\Users\MyUserName\AppData\Local\temp
They have the following format:
DWHxxxx.tmp where x = random string of 4 letters and numbers.
As Symantec quarentines the files more are created.
I ran Norton power ereaser and it found nothing.
I ran HitmanPro and came up clean.
I ran rkill and it did find anything.
Not sure what to do now.
Thanks in advance for any help.