Hey guys so last night while I was working I noticed a popup saying my files are encrypted i closed it because I figured it was a ad popup so I stayed away. well come to find out that all my files on my pc music photos videos etc all have 3 files in the folders "help decrypt" ones a site to "unlock it" I believe its a ransom site and the other is steps to follow. when the PC boots the messages is automatically booting at startup. I ran Panda Antivirus AVG and Panda Cloud cleaner it found 1 and neutralized it and the cloud cleaner found about 9 it said it was cleaned but the files are still encrypted so maybe the viruis is gone but now i have to repair the files.
I went to the first step as to pick a restore point in my computer before the attack...all restore points are gone. Windows Firewall has been deactivated. AVG is locked in Disabled mode. none of the windows security or updater will work. So this thing locked down everything to help it spread freely and nothing detected this thing. Also im missing 50Gbs of HDD now so this thing is fat and largely taking up my HDD like a Tick swelling up on a juicy Host
Help me guys if you can last thing I wanna do is reformat my HDD and I dont have a OS install disc for this PC so thatll be a pain. My OS system is Windows 7 Home Edition with SP1
Edited by razielmaharahi, 29 April 2015 - 03:20 PM.