Bought and installed Malwarebytes on 1/20/2014. I found the following two potentially threatening files in my 'Docs' folder today. Both marked modified on 1/20/2014. The files extensions are .txt and .gif with the same name "HOWDECRYPT". I did not touch the .gif file, but here are the contents of the .txt file. I don't know what to do, but I feel some urgency in having to do something. I would appreciate any help. Also I need to add that I ran both Malwarebytes and Hitman in regular and safe modes, and no threats were detected. Contents of .txt file: All files including videos, photos and documents on your computer are encrypted. Encryption was produced using a unique public key generated for this computer. To decrypt files, you need to obtain the private key. The single copy of the private key, which will allow you to decrypt the files, located on a secret server on the Internet; the server will destroy the key after a time specified in this window. After that, nobody and never will be able to restore files. In order to decrypt the files, open site 4sfxctgp53imlvzk.onion.to/index.php and follow the instructions. If 4sfxctgp53imlvzk.onion.to/index.php is not opening, please follow the steps below: 1. You must download and install this browser http://www.torproject.org/projects/torbrowser.html.en 2. After installation, run the browser and enter the address: 4sfxctgp53imlvzk.onion/index.php 3. Follow the instructions on the web-site. We remind you that the sooner you do, the more chances are left to recover the files. IMPORTANT INFORMATION: Your Personal CODE: 00000001-XXXXXXXX (X substituted for last characters)... I did this for security..
