Windows 10: zepto virus on windows 10

Hi

I just got informed that I had Zepto Virus and was told to call a Microsoft support number with a Swedish number. I called and they wanted to have access to my computer and install GoToAssist.exe.


Questions:


Is this a scam?


How do I remove the Zepto Virus?


Thanks anybody who can help me. I am at my wits end.


Gary

:)

 

Zepto

If your file extensions have suddenly changed, then it sounds like you are dealing with a ransomware infection.

Any files that are encrypted with the newest Locky Ransomware variant will be renamed with random alpha-numerical characters but utilize the
.zepto extension (i.e. 024BCD33-41D1-ACD3-3EEA-84083E322DFA.zepto) and leave a ransom note pattern consisting of _(****)_HELP_instructions.txt/.bmp/.html...(i.e. _6789_HELP_INSTRUCTIONS.txt, _6789_HELP_INSTRUCTIONS.bmp, _6789_HELP_INSTRUCTIONS.html).
More information in this BC News Article:
New Locky version adds the .Zepto Extension to Encrypted Files

You can submit samples of encrypted files and ransom notes to ID Ransomware for assistance with identification and confirmation.
This is a service that helps identify what ransomware may have encrypted your files and then attempts to direct you to an appropriate support topic where you can seek further assistance.

A repository of all current knowledge regarding Locky Ransomware is provided by

Grinler (aka Lawrence Abrams), in this topic:

Locky Ransomware Information, Help Guide, and FAQ.

Unfortunately, there is no known way to decrypt files encrypted by Locky (Zepto) without paying the ransom.

There is an ongoing discussion in this topic where you can ask questions and seek further assistance. Other victims have been directed there to share information, experiences and suggestions.

• Locky Ransomware Support & Help Topic - _Locky_recover_instructions.txt

When or if a solution is found, that information will be provided in this support topic and you will receive notification if subscribed to it.

 

ZEPTO Virus effected my excel files

Your files got encrypted by a new variant of Locky Ransomware, see
http://www.bleepingcomputer.com/news/security/new-locky-version-adds-the-zepto-extension-to-encrypted-files/

If you don't have a backup of your files, there is currently no possibility to decrypt your files without paying the ransom, see

http://www.bleepingcomputer.com/forums/t/618447/files-encrypted-with-the-extension-zepto/

For further help and/or information I suggest to ask/read/post in
http://www.bleepingcomputer.com/forums/t/605607/locky-ransomware-support-and-help-topic-locky-recover-instructionstxt/

Good luck...

 

Zepto ransonware

Interesting / useful stuff on removal of ransomware...

BUT why is a fully updated Windows Defender (running on the July version of 32-bit Windows 10) still allowing ZEPTO to get in?

I have just spent a lot of the day trying to remove Zepto from my elderly father's laptop. It has done a vast a mount of damage (although he has a separate backup).

Does Windows Defender not block Zepto (which I think came on an email attachment)?