my parents contacted me since in the last days they have multiple windows open, each time they turn on the PC (windows 7 desktop).
I remote-connected to their PC, and what I saw was very disturbing:
dozens of open files, named like "Recovery+bcfnl", or "Recovery+xxxxx".. don't remember all the extensions..
also, by browsing the folders I found these files created in every folder in the PC. every single one contained hundreds of these files.
the files' types are html, txt, jpg, and all have the same text in them, asking to follow some flow to buy BITCOIN or something like that, giving a list of steps with links to follow etc.
first step, I installed AVG anti-virus, and ran a scan, which detected about 56 malware issues - and removed them.
I cleaned and deleted over 100,000 files from the PC, ran the scan again and rebooted the PC.
the next morning my mom says - it came back
again multiple windows open with these names..
did anyone hear about this kind of issue? any helpful tool that you know, which will help us to overcome this?
Edited by quietman7, 10 March 2016 - 07:54 AM.
Moved from AII to Gen Sec - Hamluis.