• Hi there and welcome to PC Help Forum (PCHF), a more effective way to get the Tech Support you need!
    We have Experts in all areas of Tech, including Malware Removal, Crash Fixing and BSOD's , Microsoft Windows, Computer DIY and PC Hardware, Networking, Gaming, Tablets and iPads, General and Specific Software Support and so much more.

    Why not Click Here To Sign Up and start enjoying great FREE Tech Support.

    This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

.pllmxshn

Status
Not open for further replies.
I was wondering has anyone ever heard of the following extension? I have tried everything to open but the files won't open. Any help would be great
 

Attachments

  • 2020-08-21.png
    2020-08-21.png
    143.8 KB · Views: 9
  • PLLMXSHN-DECRYPT.txt
    8.8 KB · Views: 10
Hello,

You indeed have ransomware. Luckily they have a decryptor for you.

Please download the GandCrab Ransomware Decryptor from BitDefender HERE and please follow the directions on the page here.

Please do advise if this works or not. If it does, we will have to do some cleanup and preventative maintenance.
 
Hello,

You indeed have ransomware. Luckily they have a decryptor for you.

Please download the GandCrab Ransomware Decryptor from BitDefender HERE and please follow the directions on the page here.

Please do advise if this works or not. If it does, we will have to do some cleanup and preventative maintenance.

When I double-click on the BDGandCrabDecryptTool, I say yes, and then nothing, won't open
 
Your system might be more damaged than I thought. Try to do the following for me.

Please download the FRST 32 bit or FRST 64bit version to suit your operating system. It is important FRST is downloaded to your desktop.

If you are unsure if your operating system is 32 or 64 Bit please go HERE.

Once downloaded right click the FRST desktop icon and select "Run as administrator" from the menu.

icon2-jpg.794


If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
Frst will open with two dialogue boxes, accept the disclaimer.

frst-disclaimer-jpg.795

Accept the default whitelist options,
If the additions.txt options box is not checked please select it.
Then select "Scan"

frst-jpg.796


Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.

2016-08-12_152002-jpg.797


Please Copy and Paste the contents of these logs in your next post for review by our Security Team
 
Your system might be more damaged than I thought. Try to do the following for me.

Please download the FRST 32 bit or FRST 64bit version to suit your operating system. It is important FRST is downloaded to your desktop.

If you are unsure if your operating system is 32 or 64 Bit please go HERE.

Once downloaded right click the FRST desktop icon and select "Run as administrator" from the menu.

icon2-jpg.794


If you receive any security warnings, or the User Account Control warning opens at any time whilst using FRST you can safely allow FRST to proceed.
Frst will open with two dialogue boxes, accept the disclaimer.

frst-disclaimer-jpg.795

Accept the default whitelist options,
If the additions.txt options box is not checked please select it.
Then select "Scan"

frst-jpg.796


Frst will take a few minutes to scan your computer, and when finished will produce two log files on your desktop, FRST.txt, and Addition.txt. They will display immediately on the desktop, but can be reopened later as a notepad file.

2016-08-12_152002-jpg.797


Please Copy and Paste the contents of these logs in your next post for review by our Security Team
 

Attachments

  • Addition.txt
    38.4 KB · Views: 6
  • FRST.txt
    118.4 KB · Views: 6
At first glance, I see you have uTorrent installed, which is most likely how it came onto your system and we can not assist you while it's on your system.

At this point, you are better off doing a fresh install of Windows as it's unknown what has been compromised. Ransomware is so volatile and unpredictable, it can encrypt system files and even if we do a cleaning, there's no 100% chance it will be removed from your PC. That's why we always advise against using Torrent applications and making sure your system is well protected. I would advise Resetting your PC which you can doing the Reset PC option. This will erase everything.

reset1.png
reset2.png
 
Status
Not open for further replies.