Is this a ransomware?

Asked Apr 25 '16 at 20:20

Active May 18 '17 at 16:21

Viewed 2,041 times

I just got this window on my main computer:

Apparently, it's from Windows. I checked, and the process EXE file is the original one (efsui.exe or something like that). However, I don't use EFS (I never heard about it). I never encrypted any of my drives.

Is it possible that my system is infected by a ransomware encrypting my files?

edited May 18 '17 at 16:21

Stevoisiak

14,394
40
103
163

asked Apr 25 '16 at 20:20

zdimension

13,173

What action specifically were you doing when you got this, because there is no doubt in my mind, you are currently using an EFS. The good news is isn't ransomware, if it were ransomware, it would have done everything silently and would NOT use EFS capabilities within Windows. – Ramhound Apr 25 '16 at 20:22
I was working on a project on VS2015. Is there a way to list all my disks and find the ones that use EFS? – zdimension Apr 25 '16 at 20:30
You can do that through the Properties window. – Ramhound Apr 25 '16 at 20:31
Weird. None of my drives appears to be encrypted. – zdimension Apr 25 '16 at 20:43
Did you google "what is ransomeware"? Possible duplicate – Moab Apr 25 '16 at 21:11
1

I know what a ransomware is... it's just that I saw that encryption stuff, and it scared me. – zdimension Apr 25 '16 at 22:36
1

EFS works on a per-file basis, so you’ll have to look a little harder if you want to find what’s encrypted. – Daniel B Oct 24 '16 at 22:03
This could be useful, to find the encrypted files. – RogUE May 18 '17 at 16:38

Is this a ransomware?

0 Answers0