*

Robin_K

  • A Cup
  • 2044
Encrypted files because of "ransomware"
« on: March 31, 2017, 03:13:19 PM »
It's that thing where suddenly you can't open any of your files. In each folder is a message telling you to pay $$$ for the encryption key that will release the files.

Everything I read says don't pay. You never get a "key." My friendly computer expert says there's nothing that can be done. I have to reformat my computer or get a new one. There are some sites that offer degrees of help, but they depend on the type of malware.

So . . . anything I can do? I've done "system restore" to the earliest possible date, run every virus check and clean-up, etc. I can create new files, and they are not "encrypted." But the old ones are gunk.

Thank you in advance!

*

bignatslover

  • P Cup
  • 4260
    • I love the BEA
Re: Encrypted files because of "ransomware"
« Reply #1 on: March 31, 2017, 11:02:19 PM »
System Restore?

From the Control Panel

    Log on to your computer as an administrator.
    Open the Control Panel by clicking Start, and then clicking Control Panel.
    Click System and Security, and then click System.
    Under the Control Panel Home menu, click System protection. ...
    Click System Restore.
    Recommended Restore is the default choice.

*

bignatslover

  • P Cup
  • 4260
    • I love the BEA
Re: Encrypted files because of "ransomware"
« Reply #2 on: April 01, 2017, 03:09:45 PM »
Hi, re-reading your message I saw where you had already tried System Restore.

When the police need to read hard drive contents, they never read the drive from the PC it is inside.  Rather, they pull the hard drive out, stick it in a drive dock (the one pictured here can be had for $30.00) and view the files from another PC.

You might need to borrow a friend's PC, but I am wondering if you can use a drive dock to copy your files to an entirely different drive.  It is a good time to buy a hard drive right now anyway, as six-TB capacity ones can be had now for about $249.

*

TheZookie007

  • L Cup
  • 30076
Re: Encrypted files because of "ransomware"
« Reply #3 on: April 04, 2017, 10:00:24 PM »
Sorry to hear about this, Robin_K :(

You could also try the tips outlined here:

PC World: "How to rescue your PC from ransomware"
Don't negotiate with e-terrorists. Be a hero and rescue your hostage PC.

Network World: "A free decryption tool is now available for all Bart ransomware versions"
Antivirus vendor Bitdefender obtained the Bart decryption keys from the Romanian police

Good luck!
"When your city is French in origin, and your Mayor and Governor are Democrats, and those most affected by this natural disaster are Black, don't expect much help from Bush." -- Left of Y'all (and the link works now too! )

*

Robin_K

  • A Cup
  • 2044
Re: Encrypted files because of "ransomware"
« Reply #4 on: April 07, 2017, 07:12:57 PM »
Thank you, everyone. I really, REALLY appreciate your help. I had backed up my most important work files, but many years of photos are scrambled.

It seems that what I have is the new "Cerber red" ransomware. Yes, it appears that ransomware has a brand name. For anyone interested, this is organized crime (likely overseas).