Spora Ransomware infection after startup

Manders7

New Member
Thread author
Apr 3, 2017
1
1
2
Pennsylvania
Spora Ransomware pop-up screen showing on my system since late yesterday afternoon. I think I clicked a link for a font to be compatible for the website. It seemed harmless at the time but I am not technical in any sense. I normally use Malwarebytes as my anti-virus program, and also Windows Defender and Microsoft EMET is on my system but I'm not sure how to use it. I realize I may not be able to decrypt my files but I am desperate to get this persistent ransomware off of my system to prevent further damage. The page upon startup with the Russian lettering has this file path - C:\Users\Mandy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\US3E2-4BROZ-FTRXX-ATZTX-FTKEF-FTGGY.html
 

Attachments

  • Like
Reactions: _CyberGhosT_
Hello,


FRST.gif
Fix with Farbar Recovery Scan Tool

icon_exclaim.gif
This fix was created for this user for use on that particular machine.
icon_exclaim.gif

icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
icon_exclaim.gif

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

  • Right-click on
    FRST.gif
    icon and select
    RunAsAdmin.jpg
    Run as Administrator to start the tool.
    (XP users click run after receipt of Windows Security Warning - Open File).
  • Press the Fix button just once and wait.
  • If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
  • When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.
 

Attachments