I need help! Yesterday got infected and all my files are encrypted. Windows defender reported Win32/Dorv.C!rfn , Trojan:Win32/Miuref!rfn and Path Found: file:_C:\Users\neboj\AppData\Local\Ajtzworks\tmpB48A.exe;process:_9596 File are crypted but extensions didn't change. I can upload the same file that is crypted and its original copy. Hope that someone can detect the type of this virus. The ransom screen didn't appear for me at all.