Got all my files encrypted by RSA2048/AES-128 NASTY!

Page 2 of 3 FirstFirst 123 LastLast

  1. Posts : 8
    Windows 10
    Thread Starter
       #11

    Good morning! Coffee time so I will start on this after coffee. Makes sense about the E drive I will try that Tout a l'heure!
    simrick said:
    Okay, you do not have the hidden administrator account enabled. My mistake. I was confused.
    I would not try to do any uploading from the camera until you have the system cleaned. That is probably what is preventing it. Were you able to run the ESET Online Scan or Malwarebytes Antimalware?



    So you have 2 accounts, one called Administrator which uses a password, and one with a username (local account) which uses a PIN, correct? and the user account with the PIN is the one that was encrypted, right? Do they both have admin rights on the system?



    You can do it from either account. Only an "admin-rights" account will have authority to do this. If the account you're in doesn't allow you to create a new user, then it's not an admin-level account, so try the other one. Make sure the new account you create has admin rights as well (not a child account).



    It could be that you are "copying" and not "moving". In that case, once the files are all copied to the flash drive, you can just select them all on the computer and right-click, then Delete.
      My Computer


  2. Posts : 8
    Windows 10
    Thread Starter
       #12

    Lancaster said:
    Good morning! Coffee time so I will start on this after coffee. Makes sense about the E drive I will try that Tout a l'heure!
    Got my "Other User" edition now up and running! Now I will follow the one for deleting the "bad" one!
      My Computer


  3. Posts : 16,325
    W10Prox64
       #13

    Lancaster said:
    Got my "Other User" edition now up and running! Now I will follow the one for deleting the "bad" one!
    Hi. Good luck, and waiting for your response on the scans. Thanks.
      My Computer


  4. Posts : 8
    Windows 10
    Thread Starter
       #14

    simrick said:
    Hi. Good luck, and waiting for your response on the scans. Thanks.
    Well what do you know? I now have an Administrator Account, and a User account and the other one is GONE! The last thing I will do is run a malwarebytes full scan on each one. I also have VIPRE and CClean. If you were close I would buy you a drink! A very useful site. How do you make your money? I will let you know the results. I lost about 3000 photos, I also am a musician so had lots of tunes and these A H's do it to the average ordinary guy but it has been a LESSON!
      My Computer


  5. Posts : 16,325
    W10Prox64
       #15

    Lancaster said:
    Well what do you know? I now have an Administrator Account, and a User account and the other one is GONE! The last thing I will do is run a malwarebytes full scan on each one. I also have VIPRE and CClean. If you were close I would buy you a drink! A very useful site. How do you make your money? I will let you know the results. I lost about 3000 photos, I also am a musician so had lots of tunes and these A H's do it to the average ordinary guy but it has been a LESSON!
    Good deal! I'm sorry about all the photos and music you lost. Hopefully, these crooks will be caught and their servers confiscated. If that ever happens, and you still have your encrypted files, you should be able to get them back. It's a hard lesson to learn, indeed.

    I would suggest you purchase an external hard drive, (large enough to hold several images of your system), and use the free version of Macrium Reflect to make an image of your data every so often, then disconnect the drive from the system when it's not in use. Should you ever get hit again, at least you will be able to restore the latest image and have your stuff from up to that point.

    As for the drink, well, that would be nice! But I'll have to settle for a virtual drink. Everyone here at TenForums is a volunteer. We give help, and we get help. We do this because we love it. Happy endings are our reward.

    Cheers!
      My Computer


  6. Posts : 16,325
    W10Prox64
       #16

    p.s. when you are satisfied, please go ahead and mark the thread as solved. :)
      My Computer


  7. Posts : 16,325
    W10Prox64
       #17
      My Computer


  8. Posts : 19
    Windows 10 pro 64bit
       #18

    all I can say is holy crap
      My Computer


  9. Posts : 16,325
    W10Prox64
       #19

    simon123 said:
    all I can say is holy crap
    Why?
      My Computer


  10. Posts : 8
    Windows 10
    Thread Starter
       #20

    simrick said:
    p.s. when you are satisfied, please go ahead and mark the thread as solved. :)
    Did the malwarebytes scan and 0. Thanks for the much needed help!
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 11:13.
Find Us




Windows 10 Forums