crystalex05

Here they are :D Addition.txt FRST.txt

Sorry for being ambiguous. I have installed windows. Downloaded an AV solution. Performed Windows Updates. Started to download drivers (it is a gaming laptop). Starting to populate it I think this thread can be marked as Fixed. Even though those 2 days could be resumed to just a simple windows reinstall, still i am very gratefull for your support. I learned a few new things and you assisted me during the procedures and helped me! So, Thank you, again!

Done. All is set. I also needed to format the ssd and it took a while cuz i went on "slow" not quick way :)

Thank you. Yes i have.

Pfff i think i need a new windows image. After going to Recovery-> Reset this pc -> Remove Everything -- There was a problem resetting your PC No changes were made. -- I was kind of sure that it won't be an easy thing to do, in my situation ..

From what i know, only LastPass stored my pass .. and google for some sites. Okay, so i will proceed with Resetting it and i will come back after everything is set. Thank you!

Reset this pc with - Remove all files Should work fine to remove any malware and danger?

Good Morning. I think i will wipe everything and i will install a new windows. Should the malware cause any inconvenient if i choose to do this? I didn't have any file with passwords. Maybe just google password saving and a software "LastPass" which stores passwords. Are those affected? Any tips for the future procedures? I will reinstall windows and that's it

Done Sorry for the delay, the backup procedure took a while because the machine is kind of slow now. (sorry for my lack of knowledge, what's up with that shift holding while inserting the USB drive?) Logs attached: FRST.txt Fixlog.txt

Ok, sorry. I didn't find a way to edit the post, and i needed to post another. While reading your previous message, the MBAR was already scanning. I got it, that i cannot decrypt files. I will save them, and maybe sometimes i will be able to decrypt them. I think there isn't an issue to have some encrypted files, since the machine was cleaned, right? Or i should also make them disappear from the machine? As i said before, i couldn't upload both files on the id-ransomware website. I have attached them below, in 7z. Also the scanning LOG after i "cleaned up" is uploaded. PS: OMG the USB stick i used until now it cannot be opened anymore on the clean machine. I have formatted it and still. It returns: "The structure of this drive is corrupted.." or something like that. Needed to change the USB device. crystalex05-ransomware.7z mbar-log-2020-04-28 (00-26-46).txt

https://blog.emsisoft.com/en/34375/emsisoft-releases-new-decryptor-for-stop-djvu-ransomware/ For the _readme

Error: Please upload a ransom note and/or sample encrypted file for identification. is received if i put the readme as "ransome note" and the .exe as "Encrypter filed"

It seems i still cannot access the internet. (don't know if any specific procedure needs to be done) Opening the browser and typing any website doesn't work.

I have performed the above mentioned steps. PS: is there anyway to decrypt the files? I mean, to backup them and somehow, after cleaning the machine, to try to decrypt? I am mainly interested in photos.

I have also tried to install other AV (av**T) which seemed it doesn't need internet (to download files needed for installation). It failed to install...

Yes, a have a clean pc and USB. The problem is, i think that this ransomware was updated. Because all fixes i found over the internet do not suite my situation. Even my backups seems to be removed. I tried to restore to previous point and load backup ... i have non / they are deleted. Everywhere is suggested to simply install MB and it is fixed. Guess what, i cannot install MB, i cannot acces. I've just cleaned the hosts file and still seems to be unable to use internet.

FRST.txtAddition.txtShortcut.txt

Hello! I am a victim of .qewe ransomware. The attack seems to be a complex one, adding group policy, restricting internet access and many other things including encrypting files. I see lots of "fix" suggestion that i need to install MB. The problem is that i cannot successfully install it and the following errors pops: An error occurred while downloading. Please check your connection to the internet and try again ... As i mentioned. I cannot access to browse internet. How can i fix this? :(