Hi,
I have recently noticed that all my files have been encrypted and have the extension .matrix . Clearly, this seems to be a case of matrix ransomware and each time I start my laptop, I get the following pop-up window:
[ATTACH]1857[/ATTACH]
I have installed a couple of antivirus softwares such as Kaspersky, Avast and Malware Bytes and the encryption seems to have stopped because yesterday whatever pdf file I downloaded became encrypted within seconds and today I seem to have the downloaded pdfs intact, i.e. their extension did not change even after restarting the computer. But I am not sure, whether the malware has left my computer especially because I still get the the pop up window each time I restart my laptop. Now I can shut this pop up window by going on Task Manager, but I want this to stop completely. About a few hours ago I noticed that this pop up is originating from a file mshta.exe which is contained in the following directory C:\Windows\SysWOW64 . So I wanted to know if I should go ahead and delete mshta.exe because I am not sure whether doing so will eradicate the problem.
Also I wanted to add that my files aren’t that important and even if I lose them to encryption, I don’t care much. So I am not asking anyone to decrypt my files, which I reckon is a very hard task. But I just want to get rid of this malware along with the hideous pop up that accuses me of heinous crimes.
Thank you for your time and consideration and I would really appreciate any help.
Details of my system:
OS Version: Microsoft Windows 8.1 Single Language, 64 bit
Processor: Intel(R) Core™ i3-4030U CPU @ 1.90GHz, Intel64 Family 6 Model 69 Stepping 1
Processor Count: 4
RAM: 4026 Mb
Graphics Card: Intel(R) HD Graphics Family, 2045 Mb
Hard Drives: C: 455 GB (336 GB Free); D: 20 GB (2 GB Free); F: 454 GB (452 GB Free);
Motherboard: Hewlett-Packard, 227E
I have recently noticed that all my files have been encrypted and have the extension .matrix . Clearly, this seems to be a case of matrix ransomware and each time I start my laptop, I get the following pop-up window:
[ATTACH]1857[/ATTACH]
I have installed a couple of antivirus softwares such as Kaspersky, Avast and Malware Bytes and the encryption seems to have stopped because yesterday whatever pdf file I downloaded became encrypted within seconds and today I seem to have the downloaded pdfs intact, i.e. their extension did not change even after restarting the computer. But I am not sure, whether the malware has left my computer especially because I still get the the pop up window each time I restart my laptop. Now I can shut this pop up window by going on Task Manager, but I want this to stop completely. About a few hours ago I noticed that this pop up is originating from a file mshta.exe which is contained in the following directory C:\Windows\SysWOW64 . So I wanted to know if I should go ahead and delete mshta.exe because I am not sure whether doing so will eradicate the problem.
Also I wanted to add that my files aren’t that important and even if I lose them to encryption, I don’t care much. So I am not asking anyone to decrypt my files, which I reckon is a very hard task. But I just want to get rid of this malware along with the hideous pop up that accuses me of heinous crimes.
Thank you for your time and consideration and I would really appreciate any help.
Details of my system:
OS Version: Microsoft Windows 8.1 Single Language, 64 bit
Processor: Intel(R) Core™ i3-4030U CPU @ 1.90GHz, Intel64 Family 6 Model 69 Stepping 1
Processor Count: 4
RAM: 4026 Mb
Graphics Card: Intel(R) HD Graphics Family, 2045 Mb
Hard Drives: C: 455 GB (336 GB Free); D: 20 GB (2 GB Free); F: 454 GB (452 GB Free);
Motherboard: Hewlett-Packard, 227E
Comment