Thread: locky ransome ware

3 issues as explained.

1. My PC (W8.1) was playing up (slow, some programs had issues) so l tried "system restore" - that didn't work at all, alarm bells ringing when that happens!

2. So l reinstalled windows 8 to be on the safe side, but when the installation started - it came up with the "C" drive having 4 partitions, so l stumbled my way through trying to delete 2 partitions, 1 for MBR and the other for everything else.
Some time later l managed to get windows installed, this time before l hooked up to the "net" l installed anti ransomware, (malwarebytes anti ransomware and a version from bitdefender).

3. Opened my email and there was an invoice as l had just brought some screws from ebay, but when l opened the invoice it made no sense (gobbly gook) so l quickly deleted that and got out of my email, the proper ebay invoice did turn up.

When l ran Ccleaner registry cleanup it kept coming up with 2 items that would not clean up, so l found them via regedit, one was titled "locky" the other made no sense just letters and numbers?
l deleted these, but l'm not sure if my system has been compromised? everything seems ok.

So would it be safer to format my drive and start again or was it a falsey or is the anti ransomware working?

Apparently locky can attach itself to anything plugged into your PC.

Why would there be 4 partitions, it could have been 3 for C and 1 for Dl should have taken a photo, but was getting cranky by then and just wanted the $%#@&* thing to work.

Linux is looking good at the moment, for browsing etc, then have a seperate PC for my photographs - lightroom etc.

Summary be really careful opening any invoices or dodgy emails, l'm usually right onto the pr^cks but just got caught out, with bad timing.

Regards
Stevo