PST Posted May 29, 2021 ID:1460280 Share Posted May 29, 2021 Addition.txt FRST.txt Link to post Share on other sites More sharing options...
icotonev Posted May 29, 2021 ID:1460282 Share Posted May 29, 2021 HI , @PST ..and I will review your diaries and return the answer soon ..! Thanks..! 🙂 Link to post Share on other sites More sharing options...
icotonev Posted May 29, 2021 ID:1460288 Share Posted May 29, 2021 Quote AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: McAfee VirusScan (Disabled - Up to date) {F682A51C-4EAD-6A3A-F460-B9C1D4A2DB09} FW: McAfee Firewall (Disabled) {CEB92439-04C2-6B62-DF3F-10F42A719C72} Are you currently using McAfee software..? What makes you think your system is infected ...? Can you tell me a little more ...? SecurityCheck by glax24 I would like you to run a tool named SecurityCheck to inquire about the current-security-update status of some applications. Download SecurityCheck by glax24 from here and save the tool on the desktop. If Windows's SmartScreen block that with a message-window, then Click on the MORE INFO spot and over-ride that and allow it to proceed. This tool is safe. Smartscreen is overly sensitive. Right-click with your mouse on the Securitycheck.exe and select "Run as administrator" and reply YES to allow to run & go forward Wait for the scan to finish. It will open in a text file named SecurityType.txt. Close the file. Attach it with your next reply. You can find this file in a folder called SecurityCheck, C:\SecurityCheck\SecurityCheck.txt Link to post Share on other sites More sharing options...
PST Posted May 29, 2021 Author ID:1460290 Share Posted May 29, 2021 This is what making me feel I am infected. Yes I was using McAfee. Now my subscription had just ended. My data isnt that important here actually. I am doing all this for the community. The File is also attached. SecurityCheck.txt Link to post Share on other sites More sharing options...
icotonev Posted May 29, 2021 ID:1460306 Share Posted May 29, 2021 What you are showing are encrypted files after an Ransomware attack ..! To find out what you are dealing with, please go to this topic: ID Ransomware (malwarehunterteam.com) Tell me the result...! Link to post Share on other sites More sharing options...
PST Posted May 30, 2021 Author ID:1460393 Share Posted May 30, 2021 Error: Upload: Can't create destination. /home/id-ransomware/public//uploads/2021/05/847b2f8e257dc40cad35ad58346b7eeec55c62081622359101/ Also I deleted the Ransomeware software so that it wouldnt encrypt newer files. Link to post Share on other sites More sharing options...
icotonev Posted May 30, 2021 ID:1460423 Share Posted May 30, 2021 22 hours ago, PST said: Yes I was using McAfee. Now my subscription had just ended. Uninstall a Program Press the Windows Key + R. Type appwiz.cpl in the Run box and click OK. The Add/Remove Programs list will open. Locate the following program(s) on the list: Quote GridinSoft Anti-Malware Java 8 Update 191 McAfee LiveSafe Spyrix Free Keylogger Wondershare Helper Compact McAfee Consumer Product Removal ToolNote: This tool will uninstall all McAfee products from your PC. If you are using a paid version of McAfee, please be sure you have safely stored your product key. Download MCPR (McAfee Consumer Product Removal Tool) and save it to your desktop. Right-click MCPR.exe and click Run as Administrator. At the "McAfee Software Removal" window, click Next. Accept the license agreement. Complete the "Security Validation" question and click Next. You will receive a message that the removal of McAfee products is complete. Restart the computer. Re-scan with FRST Double-click FRST.exe/FRST64.exe to run it. Press the Scan button. When finished, it will produce logs called FRST.txt and Addition.txt in the same directory the tool was run from. Please copy and paste the logs in your next reply. ---------------------------------------------------In your next reply, please include: FRST.txt Addition.txt Link to post Share on other sites More sharing options...
icotonev Posted June 5, 2021 ID:1461729 Share Posted June 5, 2021 Are you still with us..? Are you having issues getting the logs for us? Do you encounter any problems with the instructions..? Link to post Share on other sites More sharing options...
PST Posted June 7, 2021 Author ID:1461974 Share Posted June 7, 2021 Sorry Sir, but I just got a new Quick Heal subscription. I also gave my PC to a Professional and he was also unable to retrive my decrypted files so I just got rid of them as they werent of any particular use to me. You may close this thread. Thank you for such quick response! Link to post Share on other sites More sharing options...
Maurice Naggar Posted June 21, 2021 ID:1464607 Share Posted June 21, 2021 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following for Tips to help protect from infection Thank you Link to post Share on other sites More sharing options...
Recommended Posts