.pllmxshn

Collapse
X
 
  • Time
  • Show
Clear All
new posts
  • leemaree
    PCHF Member
    • Aug 2020
    • 3

    #1

    .pllmxshn

    I was wondering has anyone ever heard of the following extension? I have tried everything to open but the files won’t open. Any help would be great
  • veeg
    PCHF Director
    • Jul 2016
    • 8982

    #2
    Hello

    From the research i have done,it could be ransomware..

    jmarket @Malnutrition @gus

    Comment

    • jmarket
      PCHF Owner
      • Jan 2015
      • 7634

      #3
      Hello,

      You indeed have ransomware. Luckily they have a decryptor for you.

      Please download the GandCrab Ransomware Decryptor from BitDefender HERE and please follow the directions on the page here.

      Please do advise if this works or not. If it does, we will have to do some cleanup and preventative maintenance.

      Comment

      • leemaree
        PCHF Member
        • Aug 2020
        • 3

        #4
        Originally posted by jmarket
        Hello,

        You indeed have ransomware. Luckily they have a decryptor for you.

        Please download the GandCrab Ransomware Decryptor from BitDefender HERE and please follow the directions on the page here.

        Please do advise if this works or not. If it does, we will have to do some cleanup and preventative maintenance.
        When I double-click on the BDGandCrabDecryptTool, I say yes, and then nothing, won’t open

        Comment

        • jmarket
          PCHF Owner
          • Jan 2015
          • 7634

          #5
          Your system might be more damaged than I thought. Try to do the following for me.

          Please download the FRST 32 bit or FRST 64bit version to suit your operating system. It is important FRST is downloaded to your desktop.

          If you are unsure if your operating system is 32 or 64 Bit please go HERE.

          Once downloaded right click the FRST desktop icon and select “Run as administrator” from the menu.



          If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
          Frst will open with two dialogue boxes, accept the disclaimer.


          Accept the default whitelist options,
          If the additions.txt options box is not checked please select it.
          Then select “Scan”



          Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.



          Please Copy and Paste the contents of these logs in your next post for review by our Security Team

          Comment

          • leemaree
            PCHF Member
            • Aug 2020
            • 3

            #6
            Originally posted by jmarket
            Your system might be more damaged than I thought. Try to do the following for me.

            Please download the FRST 32 bit or FRST 64bit version to suit your operating system. It is important FRST is downloaded to your desktop.

            If you are unsure if your operating system is 32 or 64 Bit please go HERE.

            Once downloaded right click the FRST desktop icon and select “Run as administrator” from the menu.



            If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
            Frst will open with two dialogue boxes, accept the disclaimer.


            Accept the default whitelist options,
            If the additions.txt options box is not checked please select it.
            Then select “Scan”



            Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.



            Please Copy and Paste the contents of these logs in your next post for review by our Security Team

            Comment

            • jmarket
              PCHF Owner
              • Jan 2015
              • 7634

              #7
              At first glance, I see you have uTorrent installed, which is most likely how it came onto your system and we can not assist you while it’s on your system.

              At this point, you are better off doing a fresh install of Windows as it’s unknown what has been compromised. Ransomware is so volatile and unpredictable, it can encrypt system files and even if we do a cleaning, there’s no 100% chance it will be removed from your PC. That’s why we always advise against using Torrent applications and making sure your system is well protected. I would advise Resetting your PC which you can doing the Reset PC option. This will erase everything.

              [ATTACH type=“full”]6864[/ATTACH][ATTACH type=“full”]6863[/ATTACH]

              Comment

              Working...