Adlice forum

General Category => Malware removal help => Topic started by: smartMove138 on February 15, 2016, 07:49:54 PM

Title: [Split]Removing Ransomware
Post by: smartMove138 on February 15, 2016, 07:49:54 PM

Hello, I think I also have been victim of some ransomware, but I am not sure. Recently I've noticed some unusual files with mp3 extensions. At first, it didn't look strange, but then, I stumbledupon this:
http://sureshotsoftware.com/guides/teslacrypt-mp3/ (http://sureshotsoftware.com/guides/teslacrypt-mp3/)

Now, I am confused and scared... Anyone had the same problems?

Title: Re: [Split]Removing Ransomware
Post by: Curson on February 15, 2016, 09:10:57 PM

Hi smartMove138,

Welcome to Adlice.com Forum.
Yes, it may be TeslaCrypt 3.0.

Please download Farbar Recovery Scan Tool (x64) (http://download.bleepingcomputer.com/farbar/FRST64.exe) and save it to your Desktop.

• Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
  
• Press Scan button.
  
• It will produce a log called FRST.txt in the same directory the tool is run from.
  
• Please copy and paste log back here.
• The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe). Please also paste that along with the FRST.txt into your reply.
  

Regards.

NOTE : Your post has been splitted in a new thread for clarity.