Trojan:Win32/Sabsik.FL.A!ml, how to fix this

[iamscared]

how do i decrypt my files and documents i need help

[Maurice Naggar]

Hello @iamscared

My name is Maurice.  What nickname do you go by ?

Please understand that Malwarebytes has no decrypter tool of any sort for files damaged by ransomware.  I am curious as to a couple of things.

Is there actual messages for payment by crypto-coins ?   Can you get a screen grab possibly ?   CTRL-key + Printscreen key

Are some documents or image-files changed with odd looking Extensions in their file-names ?

Most important, exactly what security program is reporting finding    win32/sadsik.fla!ml   ?   Is that the Microsoft Defender antivirus ?  or is it another antivirus ??

Elsewhere you mentioned having run Farbar FRST

Please then attach the FRST.txt   +  Addition.txt   here in a reply to this thread here.

• To attach  ( upload )  attachments please click the link as shown below. Then browse to where your file is located and select it and click the Open button.

 

NOTE:  IF the machine is truly hit by encrypting ransomware, we cannot get those "cured".   Malwarebytes has no decrypter.

In cases like those, the best way to recover damaged files is from a prior Backup.

Edited August 19, 2021 by Maurice Naggar

[Maurice Naggar]

Getting the Farbar FRST reports would be very helpful. Be sure to do that.

The closest I can find at Microsoft Security about the detected trojan is one classified as Trojan:Win32/Sabsik.FL.A!ml

That is a malicious trojan.  MS does not indicate that this ia a "ransomware".

I would urge you to make time and be real sure to run this next special tool.  And right before you actually press the "scan" that you Close all web browsers.

Next steps.

Please  set File Explorer to SHOW ALL folders, all files, including Hidden ones.  Use OPTION ONE or TWO of this article

https://www.tenforums.com/tutorials/7078-turn-off-show-all-folders-windows-10-navigation-pane.html

.

[   2    ]

The Microsoft Safety Scanner is a free Microsoft stand-alone virus scanner that can be used to scan for & remove malware or potentially unwanted software from a system. 

The download links & the how-to-run-the tool are at this link at Microsoft 

https://docs.microsoft.com/en-us/windows/security/threat-protection/intelligence/safety-scanner-download

 

Look on Scan Options & select FULL scan.

Then start the scan. Have lots of patience. It may take several hours.

 

Let me know the result of this.    This is likely to run for many hours   ( depending on number of files on your machine & the speed of hardware.)

The log is named MSERT.log  

the log will be at  

C:\Windows\debug\msert.log

Please attach that log with your reply.

Edited August 21, 2021 by Maurice Naggar
corrected link to tenforums for #1

[Maurice Naggar]

Good afternoon.   Kindly provide a status update.

Thank you.    

[Maurice Naggar]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks

 

[Maurice Naggar]

NOTE: This thread/topic was ONLY for "iamscared".  This section of the forum is strictly one to one.  We do not do "me too" posts.  We do not do "group" help.