My story: My mom calls me up and says her company computer has a virus. Sends me this photo. http://i.imgur.com/k8irmNZ.jpg of ransomware. I had her do a system restore for 1 week prior. Because of the system restore I do not have a ransom letter that was placed on the desktop.
I ran the screen shot through the ID tool and got http://i.imgur.com/Ibbe2yo.png but I am unsure if it didn't work because of a crappy photo.
All files are locked up and when you try to open them it says: The file you are trying to open, 'File name here.xls' is in a different format then specified by the file extension. Verify that the file is not corrupted and is from a trusted source before opening the file. Do you want to open the file now? .jpeg is still a .jpeg but wont open. None of the file names look different just will not open
To check corruption I have ran sfc/scannow in Comm Prompt and nothing was found.
To find any clue on the ransomware itself I ran a ton of online scans and one found this.. http://i.imgur.com/71LAPDt.jpg Now, could this mean its CRYPT? The only removal tool i found was CRYPT.XXX and i ran the tool on one file. Nothing was found, nothing was fixed.
Does anyone know what this ransomware program is?
Pls assist I have done all I can and need people smarter then me.
Edit: I know pictures of screens are bleepty, the first one was sent to me and the scan shot was because I don't want any files off that computer on to mine. Just wanted to redeem myself because I roll my eyes when I see pictures of screens.
Edited by Lenona, 12 July 2017 - 05:28 PM.