Windows 10: GandCrab.AF and tiggre!plock

Hello.


My son connected a pen drive to my laptop which had GandCrab.AF Trojan and tiggre!plock yesterday. Windows defender detected it and deleted all the files of the pen drive. My son "allowed" these trojans and connected to the internet. I immediately disconnected it from the internet and windows defender showed me that it had quarantined the viruses but it would not in the future. I immediately blocked them again but Windows Defender seems to keep telling that I have a threat and actions are required.


I click Start Actions but nothing happens. It keeps showing me the same message. Under threat history, it shows that multiple copies of the viruses have been blocked except one: Trojan Win32/GandCrab.AF. Files affected being winsvc.exe. It shows "Active" and "Acions Required" but does not do anything when click "Remove" or "Quarantine". The other copies which defender blocked showed that it had affected registry files (but was blocked by Defender).


I even tried running Windows Defender Offline Scan and the threat error still shows up. Full scans have also been performed.

My questions are: 1--Has Windows Defender itself been affected since the threats were allowed earlier?

2--Has the virus been removed but Defender is showing a false positive?


Thank you.

:)

 

defender identifies but will not remove trogan win32/Tiggre!plock

Defender identifies but will not remove trogan win32/Tiggre!plock

tried about a dozen times. also tried defender offline, Malwarebytes, hitman pro with same results.

should I just format and reinstall?

 

Fixing GandCrab V5.0.4 Ransomware Virus And Decrypting all the affected files.

That's correct....

"Marcelo Rivero (Malware Intelligence Analyst) has reported that the new
GandCrab V5.0.5 breaks the BitDefender decryption tool so it will not work. Some victims have reported this new version is still being called V5.0.4."

>
https://www.bleepingcomputer.com/forums/t/669484/gandcrab-ransomware-help-support-topic-gdcb-crab-crab-decrypttxt/page-22#entry4608061

Suggest reading also all the most recent posts in:
https://www.bleepingcomputer.com/forums/t/669484/gandcrab-ransomware-help-support-topic-gdcb-crab-crab-decrypttxt/

and reading/doing

• First steps when dealing with ransomware
• How to remove ransomware the right way: A step-by-step guide | Emsisoft | Security Blog
• Ransomware: Q&A
• How crypto ransomware spreads... is it decryptable...should I pay the ransom
  

 

AFS Error Info


When I click to start some programs, I get this AFS Error Info window. After clicking OK, I then get the UAC window. Except for the extra step, nothing goes wrong--it's just annoying. Sometimes programs requiring a UAC show this AFS error, sometimes not. Anyone have any idea what this is and how to stop it?