Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Got Ransom ware bug, now Firefox & malwarebytes will not run.


  • Please log in to reply
5 replies to this topic

#1 keny1

keny1

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:07:19 PM

Posted 05 February 2018 - 07:20 PM

Moved to Am I infected? What do I do? forum.

 

 

Click on Malwarebytes & Firefox, the hour glass icon run for 5 - 6 seconds and then just goes away.  Tried other ways to start the programs with the same problem.   Any suggestions would be welcome,   Thanks In advance.  Kenny 


Edited by keny1, 06 February 2018 - 09:32 AM.
Moved from Win 7 to Ransomware - Hamluis.


BC AdBot (Login to Remove)

 


#2 hamluis

hamluis

    Moderator


  • Moderator
  • 56,385 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Killeen, TX
  • Local time:06:19 PM

Posted 05 February 2018 - 08:04 PM

What makes you think that ransomware is involved?

 

Louis



#3 keny1

keny1
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:07:19 PM

Posted 05 February 2018 - 08:08 PM

A page popped up, locking the computer, and giving information on how to unlock it for a fee. 



#4 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,905 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:19 PM

Posted 06 February 2018 - 06:36 AM

A page popped up, locking the computer, and giving information on how to unlock it for a fee.

Sounds more like a fake ransomware scam.

Actual ransomware usually will have obvious indications (signs of infection)...it typically targets and encrypts data files so you cannot open them on your computer (and all connected drives at the time of infection), in most cases it appends an obvious extension to the end or beginning of encrypted filenames (although some variants do not), demands a ransom payment by dropping ransom notes in every directory or affected folder where data has been encrypted and sometimes changes Windows wallpaper. Somes types of ransomware will completely rename, encrypt or even scramble file names. Less obvious symptoms include adding or modifying registry entries and deletion of Shadow Volume Copies so that you cannot restore your files from before they had been encrypted but leaves the operating system working so the victim can pay the ransom. Further, when dealing with real ransomware, the cyber-criminals generally instruct their victims to contact them by email or website for decryption...they do not provide a phone number to call for assistance.

If there are no obvious extensions appended to your file names, no ransom notes, no demands of payment, your data is not actually encrypted, then you most likely are dealing with fake ransomware, Ranscam (Scam Ransomware), a screen locker (lock screen), a browser pop-up or web page indicating that "your computer is infected with ransomware", all your files are encrypted", "suspicious ransomware activity" or some other version of a Tech Support Scam. Typically the scammers provide a phone number for their victims to call for assistance.

For more information about how these scams work and resources to protect yourself, please read Beware of Phony Emails & Tech Support Scams...there are suggestions near the bottom for dealing with scams and a list of security scanning tools to use in case the usual methods do not resolve the problem or you allowed remote access into your computer.

If you need individual assistance with a malware infection, you should start a new topic in the Am I infected? What do I do? forum.


.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#5 keny1

keny1
  • Topic Starter

  • Members
  • 27 posts
  • OFFLINE
  •  
  • Local time:07:19 PM

Posted 06 February 2018 - 09:22 AM

Thanks for the Quick reply, quietman7.   As, you suggest, I will move this to  Am I infected? What do I do? forum.

 

Thanks Kenny 

 

 

quietman7



#6 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,905 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:19 PM

Posted 06 February 2018 - 04:23 PM

You're welcome and good luck.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users