Jump to content

Ransomware


Recommended Posts

OK, I have a customer that was hit by some nasty ransomware, I have tried every known scan I can think of and also several sites to try and ID this one, but nothing has helped, anyone have an idea on this one?

All I get when booting up in to Windows 10 is this.

58cf6f28ba4ad_Ransom002A.jpg.4336a2d640aa6a8961394eea6497fba3.jpg

 

Have tied every password known for this PC and zip, after 3 tries it re-boots.

 

I'm just about to dump this one in the river, any help would be appreciated.

Edited by Terryl
Link to post
Share on other sites

Nope, no one asked for any remote connection, but he did see a message that popped up saying his PC was infected and to call a number.

 

So this may not be ransomware, if so how to fix it?

Link to post
Share on other sites

He failed for a technical support scam from what I can see. I've never tried to remove Syskey to be honest. If you boot into the Advanced Boot Options, select "Repair Your Computer" and then "Restore to a previous point", can you do a system restore to an earlier date?

Link to post
Share on other sites

I can't get past the password screen, all it does is reboot the PC, but I can run the hard drive on my test PC and see if I can fix the SAM, if this is related to that.

Link to post
Share on other sites

  • Root Admin

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.