Something horrible happened today! When I turned on my laptop, I noticed that all (almost all) my txt, pdf, mp4, ... files are not working.
svchost.exe -k netsvcs was running like crazy in the background and my ssd working like crazy too.
I think somehow windows 8 is encrypting my files.
To test the things, I created a text file with the content "test". I mean, I typed "test" and then saved the file. At first, it was ok, I mean, every time I double-clicked it, it showed "test" but after a few minutes, when I double-clicked it again, I got these in the file:
As you see, a simple four-character word (test) has been turned into these nonsense content.
I am losing all my files. I have lots of them. Please help me. I installed Avira and found a few viruses but they don't seem to be involved because "svchost.exe -k netsvcs" is still running.
How can I get the files back?
Update: I notice txt files which asked me to pay in order to decrypt the files. This is a ransomware called CryptoWall 3.0 (not sure about the version). More info about CryptoWall 3.0 is here:
Edited by morteza007, 18 March 2015 - 04:49 AM.
Moved from win 8 to 'Am I infected?'