5

I just got this window on my main computer:

Backup file encryption key

Apparently, it's from Windows. I checked, and the process EXE file is the original one (efsui.exe or something like that). However, I don't use EFS (I never heard about it). I never encrypted any of my drives.

Is it possible that my system is infected by a ransomware encrypting my files?

Stevoisiak
  • 13,555
  • 39
  • 101
  • 154
zdimension
  • 12,243
  • 4
  • 18
  • 30
  • What action specifically were you doing when you got this, because there is no doubt in my mind, you are currently using an EFS. The good news is isn't ransomware, if it were ransomware, it would have done everything silently and would NOT use EFS capabilities within Windows. – Ramhound Apr 25 '16 at 20:22
  • I was working on a project on VS2015. Is there a way to list all my disks and find the ones that use EFS? – zdimension Apr 25 '16 at 20:30
  • You can do that through the Properties window. – Ramhound Apr 25 '16 at 20:31
  • Weird. None of my drives appears to be encrypted. – zdimension Apr 25 '16 at 20:43
  • Did you google "what is ransomeware"? [Possible duplicate](http://superuser.com/questions/100360/how-can-i-remove-malicious-spyware-malware-adware-viruses-trojans-or-rootkit) – Moab Apr 25 '16 at 21:11
  • 1
    I know what a ransomware is... it's just that I saw that encryption stuff, and it scared me. – zdimension Apr 25 '16 at 22:36
  • 1
    EFS works on a per-file basis, so you’ll have to look a *little* harder if you want to find what’s encrypted. – Daniel B Oct 24 '16 at 22:03
  • [This](https://superuser.com/questions/58878/how-to-list-encrypted-files-in-windows-7) could be useful, to find the encrypted files. – RogUE May 18 '17 at 16:38

0 Answers0