I came home from working away to find the family computer had lost its 3 user profiles. December 20th
I reinstalled windows and my old operating system was put into "windows old" folder.
I then discovered my file names had been extended with SYUPCBA, then found I had been infected 17 dec and many file names changed.
I have installed SpyBot S&D but I am unsure weather it has stopped further infection.
After reading the posts here on this forum it appears (if I am correct) unless I pay a ransom, if I don't have backups I am screwed! on searching *SYUPCBA I find 20,000 files infected on my 4 drives.
What can I do?
Has spybot removed the trojan ie will it no longer infect more files?
If I don't pay the ransom have I lost my files?
should I take off or trash "windows old from my c drive?
Edited by hamluis, 24 December 2014 - 07:40 AM.
Moved from Gen Security to Am I Infected - Hamluis