Laptop attacked by ransomware tonight - a screen popped up saying I had been infected with RSA4096 ransomware, all my files were encrypted, and would have to buy bitcoins to have it rectified.
It then out this message up as my desktop background too. I have McAfee through BT Net Protect, so ran it, and it said the ransomware had been quarantined and removed. However, despite this all my pics instead of ending .jpeg end .jpeg.crypz, and documents all end .doc.crypz, and I can't open any of them.
Make a copy of a file, then manually rename it and see if it opens. To display file extensions in windows explorer, Tools, folder options, view un-check hide extensions for known file types. To rename, some batch files may make the re-naming easier.
Make a copy of a file, then manually rename it and see if it opens.To display file extensions in windows explorer, Tools, folder options, view un-check hide extensions for known file types.To rename, some batch files may make the re-naming easier.
If the ransomware encrypted the files, then you are stuffed unless you have backups (or unless you pay the ransom).
If the ransomware changed the name of the files, but was nabbed by McAfee before it encrypted them, then renaming the files should work.
Of course, if ransomware was stopped halfway through, then renaming will work with some files and not others.
You can do a batch rename (of all files at once) using the rename command from the command prompt in the relevant folder: ren *.jpeg.crypz *.jpeg
If the ransomware encrypted the files, then you are stuffed unless you have backups (or unless you pay the ransom).If the ransomware changed the name of the files, but was nabbed by McAfee before it encrypted them, then renaming the files should work