Ransomware


  1. Posts : 2
    Windows 7 Ultimate x64
       #1

    Ransomware


    I too would like to know how to completely remove Bitlocker.

    <Attempting to provide relevant data only>

    I upgraded to Windows 10 a few weeks ago, and today I woke up and SURPRISE; All my hard drives now read as encrypted with Bitlocker (except for my primary OS drive (SSD))

    I went through the usual CMD steps playing with manage-bde and such. All signs point to some how some time during the night, all three separate physical hard drives were encrypted.

    I just logged into the local administrator account (since my profiles are all on the now encrypted drive) and noticed a text document on the desktop.

    Now, I have encountered variants of this from other clients - but I never thought it could happen to me.
    The document reads as follows:

    "Hello there.
    I would like to tell you first I'm sorry about that. Your documents, files, databased most are in original places or some moved to your local data. If you want to regain access to your local disk, all your files, documents, etc please send 1 BTC (Bitcoin) to this address: 1PFkYtDbxQRTv8Xse77u7wYG5bht8QB6e2 as fast as you can and email me at datebatut@pochta.com If you dont know what bitcoin is, please ask me for bitcoin website that you can buy it fast or search on google for a local Bitcoin shop or ATM and transfer 1 BTC to this address: 1PFkYtDbxQRTv8Xse77u7wYG5bht8QB6e2
    It's not my fault if you are try to format disk and lose all. Here are only one way to get all back and regain access to your local hard disk drive and this way is to send 1 Bitcoin to this address: 1PFkYtDbxQRTv8Xse77u7wYG5bht8QB6e2
    It's just business not trying to get your money and then to not give to you the bitlocker password. Waiting for your reply to my email address ( datebatut@pochta.com ) if you wanna get the bitlocker password. Thanks for your time!"

    So there you have it.
    I would really like to know how this happened and how to prevent it from happening again.
      My Computer


  2. Posts : 25,847
    Windows 10 Pro. 64/ version 1709 Windows 7 Pro/64
       #2

    Ransomware


    Some how you have got infected with one of the several ransomeware infections.

    I would suggest going to our Security section on this forum and start a thread with your problem.

    https://www.sevenforums.com/system-security/

    I would also report this to your police department and see if they would like this information.
      My Computer


  3. Posts : 2
    Windows 7 Ultimate x64
    Thread Starter
       #3

    Thanks for your response,
    But again - i too would like to know how to completely remove Bitlocker.
      My Computer


  4. Posts : 2,774
    Windows 7 Professional 64-bit
       #4

    CryptoMonitor, CryptoPrevent[or is it Protect?], WinRansom Beta [this is new! wait for stable release]. Can use both Cryptos on same computer. Haven't tried WinRansom yet. I don't know if any of those, or how any of those, work on a business network.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 09:57.
Find Us