Windows 10: "Some of your files have been affected by ranswomware" - which files?

Hi,


I'm running Windows 10 and have 2 OneDrive accounts one business and one personal running on my machine. Upon waking my machine from hibernation I noticed that both OneDrive icons in the task window have red warning signs. I click each of them and the usual OneDrive screen opens showing recent changes but at the top is a bright red warning sign below saying:

"Signs of ransomware detected. Windows Defender Antivirus found and removed a threat. Wait until OneDrives is up to date, and then select Restore to restore the files that ransomware encryted."


The problem is that I have no idea what files were encrypted and what threat was detected.


The 'Ransomware Protection' panel in "Windows Security" offers an equally cryptic message under each of the OneDrive instances listed under "Ransomware data recovery":
"Some of your files have been affected by ransomware"


How do I find out:

1 what the threat was and how it has been dealt with

2 which files Windows believes have been affected


Thanks




:

:)

 

Recent File List

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file1

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file2
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file3
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file4
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file5
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file6
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file7
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file8
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file9
...

you get the idea. ( too lazy to put it in a for loop and test it.

or just open regedit and remove all the fileX from that key.

 

Identical File Finder

@Ford
I don't think that step #3 is even needed. The probabiliy of two MD5 hashes from differing files colliding is what, 2^-128 ?
Even if your were hashing a million files the odds of a hash collision on differing files is astronomically small.

 

Uber file server build -- suggestions

Uber file server build -- suggestions?

I'm currently in the process of buying stuff for my file server build. Going to try and keep this build all in one thread this time.

Stuff already bought:

• 
  Motherboard (socket 1155 H61)
  RAM (1600MHz)
  PCI SATA cards
  Operating System (Windows 8 + FreeNAS)
  SSD
  CPU (35w Pentium Ivybridge 2.6GHz)

Looking for suggestions on:

• 
  GPU -- use the on-die GPU or buy a PCI-E graphics card (was thinking of a 7750)? My only requirement is that it is able to run 1080p mkv files and play Blurays without a problem.
  Case -- needs to hold as many 3.5" drives as humanly possible (more than 10 at least), while not being too expensive
  PSU -- needs to be able to run over 40 SATA HDDs as well as 6xPCI RAID cards and 1xPCI-E 2.0 RAID card. Silver, Gold or Platinum?
  CPU Cooler -- fanless or not?
  Case fans

That's all I can think of for now...unless I'm forgetting something...oh and one more thing -- I will be buying the hard drives two at a time as I run out of space. Also the PCI-E RAID card will be bought a lot later down the line, as I've only just got enough hard drives for 1 out of 6 of my PCI SATA cards.

Any suggestions, feel free to post. Thanks