What's new Search

Recent content by YOnGodsGreenEarth

[SOLVED] Totally Perplexed by this Locky Ransomware...

:s14: I know I marked this thread as solved-------and it is, but, for the sake of making it official for everyone's benefit, I thought it would be good to add the response I finally received from Bitdefender Tech Support via email, in which they did in fact confirm that their Bitdefender...
- YOnGodsGreenEarth
- Post #45
- Jun 11, 2016
- Forum: Security Arena
[SOLVED] Totally Perplexed by this Locky Ransomware...

Okay. Thanks for double-checking that Corrine. I ran the additional MBAR scan you asked me to do and have posted the results below. I'm glad to see nothing was found. MBAM/MBAR Scam Results: Malwarebytes Anti-Malware Malwarebytes | Free Anti-Malware & Internet Security Software Scan Date...
- YOnGodsGreenEarth
- Post #43
- Jun 5, 2016
- Forum: Security Arena
[SOLVED] Totally Perplexed by this Locky Ransomware...

:thumbsup2: :dance: Thank very much DonnaB for the detailed description. :dance: After I thought about it for a minute, what you said about companies making this info hard to find actually does make sense. I thought I read...
- YOnGodsGreenEarth
- Post #41
- Jun 4, 2016
- Forum: Security Arena
[SOLVED] Totally Perplexed by this Locky Ransomware...

I actually checked out this link and after reading through it, I didn't find anything stating that Bitdefender creates these Locky registry entries. I noticed some commenters asking about Locky but that was all I found in the Bitdefender link you provided. :huh: So I thought I would uninstall...
- YOnGodsGreenEarth
- Post #39
- Jun 3, 2016
- Forum: Security Arena
[SOLVED] Totally Perplexed by this Locky Ransomware...

Here are the results from my scans with JRT and AVZ Antiviral Toolkit... JRT Log: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Malwarebytes Version: 8.0.6 (04.25.2016) Operating System: Windows 7 Ultimate x64 Ran by TKRA7 (Administrator) on...
- YOnGodsGreenEarth
- Post #37
- May 31, 2016
- Forum: Security Arena
[SOLVED] Totally Perplexed by this Locky Ransomware...

Here is my latest ComboFix Scan: ComboFix 16-05-31.01 - TKRA7 05/30/2016 21:03:11.6.4 - x64 Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.8137.4104 [GMT -4:00] Running from: c:\users\TKRA7\Downloads\Security Tools\Special Tools\ComboFix.exe AV: ESET NOD32 Antivirus 9.0.381.0...
- YOnGodsGreenEarth
- Post #36
- May 31, 2016
- Forum: Security Arena
[SOLVED] Totally Perplexed by this Locky Ransomware...

I ran some new scans of FRST, RGSA, and ComboFix, as well as a scan with JRT from Malwarebytes and the latest version of AVZ Antiviral Toolkit from Kaspersky (of which revealed some odd-looking Rootkit detections once it completed its scan). I've posted the results of the FRST & RGSA scans...
- YOnGodsGreenEarth
- Post #35
- May 31, 2016
- Forum: Security Arena
[SOLVED] Totally Perplexed by this Locky Ransomware...

I ran some new scans of FRST, RGSA, and ComboFix, as well as a scan with JRT from Malwarebytes and the latest version of AVZ Antiviral Toolkit from Kaspersky (of which revealed some odd-looking Rootkit detections once it completed its scan). I've posted the results below... New FRST Scan...
- YOnGodsGreenEarth
- Post #34
- May 31, 2016
- Forum: Security Arena
[SOLVED] Totally Perplexed by this Locky Ransomware...

Okay. Sorry it didn't quite yield the exact results you were hoping for. I appreciate that you're even taking some time to do this over the holiday weekend. That is very kind of you. As I mentioned before, take all the time you need and if there are any further logs I can provide and/or...
- YOnGodsGreenEarth
- Post #33
- May 29, 2016
- Forum: Security Arena
[SOLVED] Totally Perplexed by this Locky Ransomware...

I've opened RegBak and now I just need to know-------should I leave the option to "Use Volume Shadow Copy Service to backup the hives" ticked? :huh:
- YOnGodsGreenEarth
- Post #30
- May 27, 2016
- Forum: Security Arena
[SOLVED] Totally Perplexed by this Locky Ransomware...

Thanks. After another reboot, its looks like they in fact did recreate themselves. I've posted another security.evtx file from Dropbox which I included below. I also included the latest scan results after running regedit again. One thing I noticed differently in regedit this time was that some...
- YOnGodsGreenEarth
- Post #29
- May 27, 2016
- Forum: Security Arena
[SOLVED] Totally Perplexed by this Locky Ransomware...

I'm about to run the RegBak to generate the specified folder, but I wanted to mention that I've now been on my computer for about 4 hrs and after simply checking RegEdit for the entries you asked me to look for after deleting the keys and restarting, they have not yet appeared in those two...
- YOnGodsGreenEarth
- Post #27
- May 27, 2016
- Forum: Security Arena
[SOLVED] Totally Perplexed by this Locky Ransomware...

I'm now midway through the latest steps you've provided. I will post back once I've created the new securtiy.evtx log. I've already downloaded RegBak and will install and run after my next reboot. I will post back once I have the everything else you requested. This also brings me to wonder...
- YOnGodsGreenEarth
- Post #25
- May 27, 2016
- Forum: Security Arena
[SOLVED] Totally Perplexed by this Locky Ransomware...

Thank you again Richard. I followed your instructions. Here is the link for the "Security.evtx" file... Dropbox - Security.evtx
- YOnGodsGreenEarth
- Post #22
- May 27, 2016
- Forum: Security Arena
[SOLVED] Totally Perplexed by this Locky Ransomware...

Thank you Richard. I must apologize again for not replying back right away. I was terribly busy with something equally important, but I'm now able to devote my full attention to this once again and I will now try your instructions and post back just as you requested with the public link once I'm...
- YOnGodsGreenEarth
- Post #21
- May 27, 2016
- Forum: Security Arena

YOnGodsGreenEarth