Validate hacked with ransomware

J

JohnLenz

Server2012 R2 Datacenter

Hyper-V - 5 systems

Trigger event... system presented message that Hyper-V services were not open. I re-booted and right after windows splash screen, it goes into continuous disk activity loop ( I ran for 26 hours). I run NovaBackup every day and restored the current and earliet image, both still failed.

I booted 3rd party disk and ran chkdsk on the c drive, no errors found. The software also has a file explorer. I looked in the windows directory under VHD & VHX and saw the same message … send xxx to yyy@gmail.com

Did ransomware get into my system?


John Lenz

Continue reading...
 
Back
Top Bottom