Virus infected a windows XP home computer and encrypted all microsoft office files like doc dox xls xlsx and so on.
Also all pictures, all pdf files
video: mov avi mp4 wmv
It seems vob and mpg are not affected.
Virus did not add any additional extension to the infected files.
It created in many folders (not all folders) these files
Those txt files among others say :
"...What's the matter with your files?
Your data was secured using a strong encryption with RSA4096.
Use the link down below to find additional information on the encryption keys using RSA-4096 ..."
I attached some of them.
I connected the disk to other computer to scan with Eset and found in dropbox folder some files infected with
W32/Filecoder.Teslacrypt and quarantined them
Also ESET found some other exe files in documents folder as W32/Kryptik.ETMN which also removed and quarantined them.
Computer is almost clean now (I think there are some suspicious files) and boot normally but all the files I mentioned in the beginning are encrypted. And are thousands of files.
A teacher gave it to me to see what I can do. This computer is used from many people in a school too.
I saw some games. Maybe from there got infected or dropbox. They didn't make backup of all files.
I would appreciate any help. Especially because is for a school.
Thank you in advance.
Edited by Genlab, 15 April 2016 - 07:43 PM.