I just got this window on my main computer:

Backup file encryption key

Apparently, it's from Windows. I checked, and the process EXE file is the original one (efsui.exe or something like that). However, I don't use EFS (I never heard about it). I never encrypted any of my drives.

Is it possible that my system is infected by a ransomware encrypting my files?

  • What action specifically were you doing when you got this, because there is no doubt in my mind, you are currently using an EFS. The good news is isn't ransomware, if it were ransomware, it would have done everything silently and would NOT use EFS capabilities within Windows. – Ramhound Apr 25 '16 at 20:22
  • I was working on a project on VS2015. Is there a way to list all my disks and find the ones that use EFS? – zdimension Apr 25 '16 at 20:30
  • You can do that through the Properties window. – Ramhound Apr 25 '16 at 20:31
  • 1
    I know what a ransomware is... it's just that I saw that encryption stuff, and it scared me. – zdimension Apr 25 '16 at 22:36
  • 1
    EFS works on a per-file basis, so you’ll have to look a little harder if you want to find what’s encrypted. – Daniel B Oct 24 '16 at 22:03

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.