📎 AI Summary:
The thread discusses a newly reported ransomware variant that locks a Windows system and demands payment for an unlock code, raising concerns about whether common recovery steps can restore booting and remove the malware. The main questions center on using Windows recovery tools—specifically the /fixmbr/boot repair approach—to get the system booting again, and whether that fully prevents reinfection (including the need for updated AV scans and possibly deleting system restore points). Overall sentiment is cautious, emphasizing recovery is possible but may not eliminate the threat if it persists elsewhere.
Trouble

Trouble

Noob Whisperer
Member details
Joined
Nov 30, 2009
Messages
13,723
Thread Author #1
Was just reading this article concerning a new version of Ransomware that seems to be emerging.
Seems to prompt with a message, that your system is locked and if you pay, they'll send you some code to unlock it.
Malware blocks booting - The H Security: News and Features
Seems like the /fixmbr switch will get your system booting again
How to use the Bootrec.exe tool in the Windows Recovery Environment to troubleshoot and repair startup issues in Windows
but it does not necessarily rid you of the potential for reinfection. You'll need to followup with a good AV solution updated to most recent signatures and possibly even delete your system restore points as it may evidently hide there as well.
Regards
Randy
 

You must log in or register to reply here.