Please help me remove this ransomware

Status
Not open for further replies.

Hellsender

New Member
Thread author
May 29, 2020
1
Ok so I have somehow gotten a ransomware on my pc which has encrypted all my documents with the extension ".pexi" I tried to install malwarebytes but it just made my pc get stuck in a restarting loop so I had to uninstall the setup. I even tried emsisoft but the file to start it got encrypted as soon the setup installed it.

I am really scared ;-; can somebody PLEASE help me
 

struppigel

Moderator
Verified
Staff Member
Well-known
Apr 9, 2020
656
Hello Hellsender

I am Karsten and will gladly help you with any malware-related problems.

Please familiarize yourself with the following ground rules before you start.
  • Read my instructions thoroughly, carry out each step in the given order.
  • Do not make any changes to your system, or run any tools other than those I provided. Do not delete, fix, uninstall, or install anything unless I tell you to.
  • If you are unsure about anything or if you encounter any problems, please stop and inform me about it.
  • Stick with me until I tell you that your computer is clean. Absence of symptoms does not mean that your computer is free of malware.
  • Back up important files before we start.
--------------------------------------------------------------

Please run the following diagnostic scans so I can ascertain the state of your computer.

STEP 1
Farbar Recovery Scan Tool (FRST) Scan

  • Please download Farbar Recovery Scan Tool (x32) or Farbar Recovery Scan Tool (x64) and save the file to your Desktop.
  • Note: Download and run the version compatible with your system (32 or 64-bit). Download both if you're unsure; only one will run.
  • Double-click FRST.exe or FRST64.exe to run the programme.
  • Click Yes to the disclaimer.
  • Ensure the Addition.txt box is checked.
  • Click the Scan button and let the programme run.
  • Upon completion, click OK, then OK on the Addition.txt pop up screen.
  • Two logs (FRST.txt & Addition.txt) will now be open on your Desktop. Attach both logs in your next reply.
 
  • Like
Reactions: Jack

struppigel

Moderator
Verified
Staff Member
Well-known
Apr 9, 2020
656
Are you still with me?
If you do not reply in the next 2 days I will close this thread, so I can take care of others.
 
Status
Not open for further replies.

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top