Reply to thread

Message

<blockquote data-quote="supernabilion" data-source="post: 1018803" data-attributes="member: 98292">Hi first im sory for my bad english.second i need advice/helpi was attaqued / victime of ransomware .isza in between 24 and 28 december 2022 (maybe).i stop virus by windows defender + voodoo + bitdefenderi did not succeed torecover data by recuva or aomei or shadow explorer ...i had some probelem with &quot;griding system utilities + and other cleeners&quot; they broke my windows 11so i erase every thing in Ci scan and rescan with a lot of software and also with commande &quot;run / commande administrator : sf /scannow ...&quot; no thinkal is cleanbutvoodoo show me a commande ines ; it seems like in the past in 28 december !its software /false positive or other things ?the commande line is like this :&quot; rundll32.exe &quot;c:\windows\installer\msi33b2.tmp&quot;,zzzzinvokemanagedcustomactionoutofproc sfxca_107427031 2217 setupconfigcustomaction!squirrel.setupconfigcustomaction.settingscustomactions.removeregkeyfrompreviousinstall&quot;and there is aslo another commande klines may be from &quot;kms&quot; crak of office i try to erase it before and using &quot;libre office&quot; but the commande is here ?&quot;xcopy&nbsp; /s /h kms_suite 21967&nbsp;&nbsp; &quot;also commande to system shell !&quot;c:\windows\sysnative\windowspowershell\v1.0\powershell.exe&nbsp; -command &quot;&amp; {1...10 |chcp 65001|get-startapps| where appid -like &quot;*!*&quot; |format-list|out-file -encoding utf8 $env:temp\startapps.txt}&quot;is it commande ligne false positive or virus or ransomeware ???some software i use now sare giveaway or free limited like :bitdefender giveaway 6 monthvoodooshield freesteganos vpn give awaycomodo freewindscribe giveaway limitedallavsoft (this programme try to connect to the net and firewall think its problem)-----------------------------------------------------can i clear the commande lines ?------------------------------------------------------</blockquote>

[QUOTE="supernabilion, post: 1018803, member: 98292"] Hi first im sory for my bad english. second i need advice/help i was attaqued / victime of ransomware .isza in between 24 and 28 december 2022 (maybe). i stop virus by windows defender + voodoo + bitdefender i did not succeed torecover data by recuva or aomei or shadow explorer ... i had some probelem with "griding system utilities + and other cleeners" they broke my windows 11 so i erase every thing in C i scan and rescan with a lot of software and also with commande "run / commande administrator : sf /scannow ..." no think al is clean but voodoo show me a commande ines ; it seems like in the past in 28 december ! its software /false positive or other things ? the commande line is like this : " rundll32.exe "c:\windows\installer\msi33b2.tmp",zzzzinvokemanagedcustomactionoutofproc sfxca_107427031 2217 setupconfigcustomaction!squirrel.setupconfigcustomaction.settingscustomactions.removeregkeyfrompreviousinstall" and there is aslo another commande klines may be from "kms" crak of office i try to erase it before and using "libre office" but the commande is here ? "xcopy /s /h kms_suite 21967 " also commande to system shell ! "c:\windows\sysnative\windowspowershell\v1.0\powershell.exe -command "& {1...10 |chcp 65001|get-startapps| where appid -like "*!*" |format-list|out-file -encoding utf8 $env:temp\startapps.txt}" is it commande ligne false positive or virus or ransomeware ??? some software i use now sare giveaway or free limited like : bitdefender giveaway 6 month voodooshield free steganos vpn give away comodo free windscribe giveaway limited allavsoft (this programme try to connect to the net and firewall think its problem) ----------------------------------------------------- can i clear the commande lines ? ------------------------------------------------------ [/QUOTE]

Verification