Hello, a few days ago I noticed avast pop up with some kind of mail shield pop up and thought it was strange so I ran avast and it didn’t detect anything, then I ran malwarebytes and it detected a trojan so it’s in quarintine right now because I was afraid if I deleted it might come back. After that nothing else happened, but a day or so later I noticed that my files on two flash drives that were in my computer were corrupted and was afraid it might spread so I took them else and ran more full system scans and still nothing was detected so I thought I was safe and nothing else happened.
Today I looked in one of my appdata files and there is the tor virus/trojan files in there and other files in that file its called LocalLow. They haven’t shown up on any scans or anything. Please help me, can this spread to other files?
I can only attach the MBAM right now because it is already something I’ve done, I’ll attach the rest tomorrow as it is 1:00am here and have to get up early in the morning.
Hi I can see no sign of the Tor ransomware on your system. Could you manually delete the files that you can see in your appdata folders
Are any of your files encrypted at all ?
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
BHO-x32: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
EmptyTemp:
CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
Run FRST and press Fix
On completion a log will be generated please post that