2 days ago, this pc im curently running has been infected with this ctb locker. It crypted almost 99% of the photos and text files zip files... First thing i did i installed malawarebytes and run a scan. then with the spy hunter.... I saw the files termination was out till I installed windows 8 on it .
1 After the infection files change name at the end with ¨pcmvrdi ¨
2 After the scans the pcmvrdi thing was gone. Now after I installed the windows the files from my external hard turned back to pcmvrdi ending wich I gues it means that are still infected .. encrypted....
I managed to recover some files from drive C in the windows thanks to shadow explorer... But the D and the external ... NO.
Can someone help me please ? Now I´m running a scan with R- Studio to see if I can do something. Please Help.
1 After the infection files change name at the end with ¨pcmvrdi ¨
2 After the scans the pcmvrdi thing was gone. Now after I installed the windows the files from my external hard turned back to pcmvrdi ending wich I gues it means that are still infected .. encrypted....
I managed to recover some files from drive C in the windows thanks to shadow explorer... But the D and the external ... NO.
Can someone help me please ? Now I´m running a scan with R- Studio to see if I can do something. Please Help.
Aucun commentaire:
Enregistrer un commentaire