I think I have a ransomware avoiding me to access Windows, for each time I restart my PC Windows boots but no login window appears and I cannot perform any operation but selecting the power and the accessibility options, and even the network card seems to be disabled. This occurred for the first time after having enabled the safe mode and possibly detected a malware (I described the problem here).
The Windows OS which is no longer accessible is installed on C:\, whereas all data and most desktop applications are stored on D:\ (second internal drive), as well as Kali Linux, on dual boot; grub is installed on D:\ too.
I can still access them though: while booting from D:\ and using Kali Linux, I can still open the D:\ folder and do operations on data and media, and while booting live distros and rescue systems from USB stick I can access all the folders as well.
I didn't open the C:\ folder and I'm using the Unix-like environment (Kali Linux booted from D:). I wonder if it's sufficient to prevent my D:\ drive from being affected from the possible ransomware or if I should be more cautious and uninstall the D:\ drive from that PC as long as the threat is there.
My question:
Given that a ransomware affected Windows on the C:\ drive, might it affect data stored on the other drives as long as I use a different operative system or should I phisically separate them?