Welcome to Live View – Take the tour to learn more
Start Tour
There is currently 1 person viewing this thread.
Roger The Butler
17 Jun 16 23:17
Joined:
Date Joined: 20 Aug 02
| Topic/replies: 3,511 | Blogger: Roger The Butler's blog
Laptop attacked by ransomware tonight - a screen popped up saying I had been infected with RSA4096 ransomware, all my files were encrypted, and would have to buy bitcoins to have it rectified.

It then out this message up as my desktop background too. I have McAfee through BT Net Protect, so ran it, and it said the ransomware had been quarantined and removed. However, despite this all my pics instead of ending .jpeg end .jpeg.crypz, and documents all end .doc.crypz, and I can't open any of them.

What can I do? Thanks.
Pause • Switch to Standard View Ransomware - help required
Show More
Loading...
Report Foinavon • June 17, 2016 11:40 PM BST
if the infection has been removed then presumably you can use your back up files.
Report Ibrahima Sonko • June 18, 2016 9:11 AM BST
Run malewarebytes.

Their is probably a tool you can download on the net to correct your files.
Report Crisp77 • June 18, 2016 9:15 AM BST
Bring back the good old days when the only danger with looking at porn was paper cuts.
Report Stow_judge • June 18, 2016 11:52 AM BST
Make a copy of a file, then manually rename it and see if it opens.
To display file extensions in windows explorer, Tools, folder options, view un-check hide extensions for known file types.
To rename, some batch files may make the re-naming easier.
Report Ramruma • June 18, 2016 2:39 PM BST
If the ransomware encrypted the files, then you are stuffed unless you have backups (or unless you pay the ransom).

If the ransomware changed the name of the files, but was nabbed by McAfee before it encrypted them, then renaming the files should work.

Of course, if ransomware was stopped halfway through, then renaming will work with some files and not others.

You can do a batch rename (of all files at once) using the rename command from the command prompt in the relevant folder:
    ren *.jpeg.crypz *.jpeg
Report Hamsterdam • June 18, 2016 2:41 PM BST
LOL don't pay-up !!!
Post Your Reply
<CTRL+Enter> to submit
Please login to post a reply.

Wonder

Instance ID: 13539