Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Old dharma virus?


  • Please log in to reply
No replies to this topic

#1 Andreaskal

Andreaskal

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:01:26 AM

Posted 01 April 2017 - 01:44 AM

Hi, it all started with i started my computer few weeks ago where the background changed to something like the attached file. Some of my files where also decrypted and had names like this: RendererInfo.txt.SN-9516213621749984-info@kraken.cc_worldcza@email.cz where the RendererInfo.txt is the normal file, the numbers are some sort of serial code i think and the info@kraken.cc_worldcza@email.cz thingy where also on my background.

My Chrome browser also changed to startpageing123 and i found out it was a virus and unistalled that.

I tried to remove the virus with security program and after that i opened steam which looked veery weird because of the many hashtags, as you can see in the other attached file. Can't really remember what else that happened besides that i thought i finally removed the virus at least i didn't see much more about that for a while(I didn't remove all the encrypted files because they actually didn't affect me so i thought it was fine).

But then few days ago My browser changed back to startpageing123 so i got scared because i thought i dint remove it all and it maybe like made a backdoor in or something.

I downloaded SpyHunter 4 and ran it it quickly found something related and ended up with like 100 different things. i removed the most dangerous of them with regedit and the files but something named winsnare couldt be removed however i tried that many times. SpyHunter also asks me sometimes if i want to run it which means its still there.

 

So how do i cleanly remove all this without affecting my files?

-Andreas 14 yrs

Attached Files


Edited by hamluis, 01 April 2017 - 02:06 PM.
Moved from W10 Spt to Ransomware - Hamluis.


BC AdBot (Login to Remove)

 





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users