I had a repeating message every 15 or 20 seconds “Norton blocked an attack by: System Infected: Trojan.Ransomlock.G.”
From the Norton Community Site I found this fix.
* Did a Ctl Alt Del to task manager, then forced both rundll32 to close.
* I located in c:/programdata (hidden folder) 1649D56A2.cpp (204KB) and deleted it.
* Then I deleted 2A65D9461 (shortcut) located in the /users/USERNAME/Appdata/Roaming/Microsoft/windows/start menu/programs/startup
* Then I rebooted the Computer.
It seems to have stopped the message however I am still uncertain if there is more to do before this Trojan is completely removed from the computer??
Any help would be appreciated?
I have attached my FRST & Addition Txt files.
Thanks in advance.