Something else I found. Something has turned protected boot on in the BIOS. I have never enabled that. Does that feel like an attack vector could change it; or is someone trying to help.
I have not gotten a ransom screen. There is a message that the C drive failed Bitlocker install. I had not looked at that drive.
It says:
Attachment 184453
D drive has put up a message asking for me to enter passwords
Attachment 184454
I will continue looking.
You need to either use an online scanner or get a anti virus boot disk to scan the system. your av and windows are both showing faults so may not be working HouseCall - Free Online Virus and Spyware Scan
Your attachments aren't working for me.
You never answered my questions:
Don't you have a Macrium image to restore? That is the only way out of this, short of a clean install.
Did you put the Spiceworks scanner on the system?
Would be interested to know, exactly what did the Trend Micro app on the router show?
Sorry it took so long. I finally wiped everything with drive cleaning.
I saved all the contents of the infected (or not) drives. I had a power blip, and after rebooting, it would accept none of my passwords. Fini.
If someone wants to see something specific regarding the problem, I could send specific things; I think. I don't know how much of the drive contents got copied. And I am not going to look at the files with my PC OS. If needed I will make use of Gandalf's USB and run windows from there with my normal drives disconnected.
If it feels like an attack to anyone and wants to do a bit of research; let me know.
I restored from a Macrium backup. I lose some data I would have really preferred not to.
I could not find Spiceworks scanner.
simrick - I Will look at the router. But there are three applications in the Trendnet package. The third one, that gave the detection's, appeared to be causing massive slowdown on the internet connection. So that is turned off. I will see if there is any log info left.
Thanks for the help.
Quote
