Answer the question
In order to leave comments, you need to log in
Can you help my grief, in decrypting files after the encryption procedure with a Trojan virus?
Good afternoon!
A week ago, disaster struck!
Opening the letter, supposedly from a courier service, launched a virus. This became clear only when he re-encrypted all the files on the computer with the extension "...no_more_ransom" . As for evil, all the copies that I saved were on an external hard drive, which was also in operation at that moment, and the same thing happened to it. The "malicious" naturally asked for a ransom for the decryption code, which is 35,000 rubles. For me, the amount is significant, and my friends unanimously said that even if I pay, I will not receive any code. What to do with it, advise, help! I work from home, and therefore it is very important to restore everything that has been accumulated. I decided to contact you after reading your article about the same trouble. I would be very grateful for your help! I understand that any work must be paid. But it is labor, not sabotage!
Answer the question
In order to leave comments, you need to log in
Kaspersky and Dr.Web have several utilities for decrypting files of some types of ransomware, try contacting them. But I wouldn't count on it too much.
If Windows shadow copies are enabled, you can try to restore files from there (the files of earlier versions are saved there). You can try to recover deleted files with software like Recuva, but only a part will be restored for sure. The virus encrypts the file and writes it in encrypted form, and deletes the original files. Here are the deleted ones you can try to recover.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question