Windows folder labels start with $

I'm working on sorting a friend's computer that was infected by a crypto virus and note that there's a number of folders now with labels like C:\$windows which have multiple subfolders.

also there are many entries in various folders with files labeled help_decrypt with extentsions like html and png. Can I simply delete these folders and files or is there a specific way to get rid of this problem? I have bit defender and malwarebytes antimalware installed.

I'm using ztreewin to look at folders and files.

https://trademe.tmcdn.co.nz/photoserver/full/378759697.jpg https://trademe.tmcdn.co.nz/photoserver/full/378759671.jpg

Thanks in advance for any input and suggestions.

geek_kiwikidd77, Apr 26, 2:19 pm

Has it been detected as Cryptowall or cryptolocker.?
Has a good explanation here .
https://blog.malwarebytes.org/intelligence/2013/10/cryptolocker-ransomware-what-you-need-to-know/ If it is the true encrypted version . send a file here . https://www.decryptcryptolocker.com/

geek_pheonix, Apr 26, 2:38 pm

Thanks Pheonix

geek_kiwikidd77, Jan 15, 3:24 am

Share this thread