Windows 10: Ransomware behavior detected - TiWorker.exe

Hello,


I received a new notification from my Bitdefender Total Security 2019 this morning:





Now, I know TiWorker.exe is part of the Windows system process, and this could be a possible false positive on my security. I'm just wondering why this has manifested all of a sudden. Has something changed recently?


The file it encrypted don't seem to be anything out of the ordinary, but I'm no windows expert





Any information that could be provided will be greatly appreciated,


Kind Regards,

:)

 

I have been infected with Ransomware

Oh.

I see that a Community Moderator converted your thread from a Discussion to a Question.

Do you have a question?

It is not quite clear (to me at least) why you've created this thread....

In case that you do indeed have a problem with ransomware:

It would be helpful if you would describe your problem more precisely, see:
Suggestions for asking a question on help forums

Without knowing more details, suggestion to read/do:

Try to identify with what Ransomware you're dealing here:
https://id-ransomware.malwarehunterteam.com/index.php

and read/follow this guide:
How to remove ransomware the right way: A step-by-step guide

Also: See the pinned threads here:
https://www.bleepingcomputer.com/forums/f/239/ransomware-help-tech-support/

Might be the best to get free expert help in above mentioned bleepingcomputer forum....

=======================

Also suggestion to read:

• Ransomware Avoidance
  
• Best Practices for Safe Computing - Prevention of Malware Infection
  

 

Detecting and Removing Ransomware

The best defensive strategy to protect yourself from malware and ransomware (crypto malware) infections is a

comprehensive approach to include prevention and your
best defense is back up, back up, and more back up on a regular basis. Preferably keeping a separate, offline backup to a device that is not always connected to the network.

• The smartest way to stay unaffected by ransomware? Backup!
• Encrypted by ransomware...Prevention before the fact is the only guaranteed peace of mind
• Use an Anti-Exploit Program to Help Protect Your PC From Zero-Day Attacks
• Ransomware and RDP – Close those RDP ports now and stay vigilant!

IMPORTANT!!! When implementing a backup strategy
include testing to ensure it works before an emergency arises; routinely check to verify backups are being made and stored properly; remove (disconnect) and isolate all backups from the network or home computer...if not, you risk ransomware
infecting them when it strikes.

For more suggestions to protect yourself from ransomware infections, see my comments (Post #2) in this topic...Ransomware
Avoidance.

 

Malware and ransomware protection

You might also want to have a look at:

• https://www.microsoft.com/en-us/wdsi/help
• Top 10 Ways PUPs Sneak Onto Your Computer. And How To Avoid Them.
  
• Ransomware FAQ - Windows Defender Security Intelligence
• Ransomware Avoidance
  
• How to remove ransomware the right way: A step-by-step guide
  

 

I've got the same thing, as of updating today. Also on BitDefender, same filepath, same files. I've not done anything about it yet. Can only assume given you have the same problem that it is indeed a false positive...