is related to an older infection which modifies the Master Boot Record (MBR) of your computer and displays a message stating that your computer's hard drives were encrypted and unless you pay the ransom you will not be able to access your files. The infected hard drives are not actually encrypted...they are just not available until you enter a password. The infection typically will move the infected hard drives MBR to another location and install a new MBR that displays a message stating that the hard drives were encrypted. The message also states that you need to visit a certain web site to receive help or send an email with a code in order to buy a password.
There is more information and discussion in this BC News article: New infection ransoms your computer with fake encryption message(safe-data.ru)
There is also an ongoing discussion in this topic where you can ask questions and seek further assistance. Other victims have been directed there to share information, experiences and suggestions.
Rather than have everyone with individual topics, it would be best (and more manageable for staff) if you posted any more questions, comments or requests for assistance in one of the above topic discussions...they include experiences by experts, a variety of IT consultants, end users and company reps who have been affected by ransomware infections.
If you need individual assistance only with removing the malware infection
, special tools are required which cannot be used in this forum. Please follow the instructions in the Malware Removal and Log Section Preparation Guide
. When you have done that, start a new topic in the Virus, Trojan, Spyware, and Malware Removal Logs forum
. If you cannot complete a step, then skip it and continue with the next. If you cannot produce any of the required logs...start the new topic anyway. A member of the Malware Removal Team will walk you through, step by step, on how to clean your computer.
To avoid unnecessary confusion, this topic is closed.
The BC Staff