[xazaxpl]

hi
im new
I got lap with Vista (sic!) and get infected by trojan crypt i spend a lot of time on google , find some topic on the forum
Here i was do:
1. Combofix ( founds a lot, win32.evo.gen )
2. Malwarebytes ( nothing found )
3. SuperAntiMalwarebytes ( nothing found )
4. couple kinds of remover for this virus ( nothing found )
5. trying encrypt from kaspersky
6. trying to recover system from point from infection - doesnt work
i think virus i removed but i cant get my crypt files to open , trying to change extension , trying tools for this
Nothing if i get opened it - i see #@$%@#%#$^$%^*&^%* sth like that

PLZ help ...
sry my english ( not native )

[Advertisements]

Hello xazaxpl,

Welcome to Geekstogo.

Some of these can be decrypted and some can't.

Do you have a screenprint of the infection console that you can post back here?

What do the encrypted files extension look like?

Can you post back the contents of ComboFix quarantine?

The list of deletions performed by CF can be found in the :\Qoobox\ComboFix-quarantined-files.txt:

Also on the encrypted file you could try right clicking and selecting "restore previous version", which will search the Volume Shadow Copy for a backup. Outside chance but you never know.

[emeraldnzl]

Hello xazaxpl,

Welcome to Geekstogo.

Some of these can be decrypted and some can't.

Do you have a screenprint of the infection console that you can post back here?

What do the encrypted files extension look like?

Can you post back the contents of ComboFix quarantine?

The list of deletions performed by CF can be found in the :\Qoobox\ComboFix-quarantined-files.txt:

Also on the encrypted file you could try right clicking and selecting "restore previous version", which will search the Volume Shadow Copy for a backup. Outside chance but you never know.