Windows 10: A ransomware attempt was made on my pc using a CLSID that mirrored mine for identification

It was a scam where they claimed to have a refund for some software, otherwise I'd be automatically charged $300 per month. Naturally when they said they wanted to put a program on my computer, I refused since I know any dot exe could put "who knows what" on my system, but I was fearful they could bill me automatically. He insisted that it could be done. He told me to check a number which he told me was my computer ID, claiming he had control of my computer by running at the command prompt "assoc" and noting the CLSID number a couple of lines from the bottom of the spool of data. He read off a number this long and with this basic configuration CLSID\{xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx} and all numbers were what he said.


He ran something called "splashtop streamer", perhaps foolish me I thought I might be able to stay ahead of what he was doing to learn within the edges of my knowledge of what he could see and what might be a real problem for me; like dancing on a needle. I realized he was looking for a program that I had erased last year by noticing he couldn't find what he was looking for and the PC cleaner type of suite was triggered in my memory. When he realized I'd erased the program that would have been a real problem that I now might be able to evade, he started attempting to change the name of my computer when I broke the connection and removed all the software that had been used in the session that lasted about an hour with me losing it from time to time, "Tell me what you are doing at each step and quit asking me why I'm mad". He was playing me, but I had to make sure what I needed to do to stay as safe as possible.


After all that I searched for what CLSID is and discovered that malware can be associated with them so I looked for a registry cleaner hoping the number might regenerate, whatever it was associated with and not know if my firewall is vulnerable. I investigated whether or not my Trend Micro would do it so I ran as many of TMs focused operations hoping that even if I didn't completely evade detection I could at least make it a hassle for anyone to mess with me that it wouldn't be worth it. Is it possible that I'm free or what can I do short of reformatting?

:)

 

.DOCM Ransomware

Some more helpful links....

• ID Ransomware
• https://support.emsisoft.com/topic/29386-first-steps-when-dealing-with-ransomware/
• https://blog.emsisoft.com/en/26164/how-to-remove-ransomware-the-right-way-a-step-by-step-guide/
  

 

I have been infected with Ransomware

Oh.

I see that a Community Moderator converted your thread from a Discussion to a Question.

Do you have a question?

It is not quite clear (to me at least) why you've created this thread....

In case that you do indeed have a problem with ransomware:

It would be helpful if you would describe your problem more precisely, see:
Suggestions for asking a question on help forums

Without knowing more details, suggestion to read/do:

Try to identify with what Ransomware you're dealing here:
https://id-ransomware.malwarehunterteam.com/index.php

and read/follow this guide:
How to remove ransomware the right way: A step-by-step guide

Also: See the pinned threads here:
https://www.bleepingcomputer.com/forums/f/239/ransomware-help-tech-support/

Might be the best to get free expert help in above mentioned bleepingcomputer forum....

=======================

Also suggestion to read:

• Ransomware Avoidance
  
• Best Practices for Safe Computing - Prevention of Malware Infection
  

 

how to protect 64-bit windows 10 PC OS from wana cry ransomware

Suggestion to also read

• Spotlight on Ransomware: Common infection methods | Emsisoft | Security Blog
• Spotlight on Ransomware: How ransomware works | Emsisoft | Security Blog
• How to remove ransomware the right way: A step-by-step guide | Emsisoft | Security Blog
• How to remove the WannaCry & Wana Decryptor Ransomware
• How to remove .WNCRY virus (@WanaDecryptor@ Ransomware)
• Remove Wana Decrypt0r 2.0 ransomware (.WNCRY Files Encrypted)