Please help me HRM.file infected on my pc

Page 1 of 2 12 LastLast

  1. Posts : 22
    Windows 10
       #1

    Please help me HRM.file infected on my pc


    Hi Guys,

    I don't know what to do, just found out on my desktop a new icon when i was clicking on it it says that i got randsomware, when i was looking on my drives some files where encrypted even my USB. Please tell me what to do are there any free software that i can use?

    Thank you in advance,

    Soufyan
      My Computer

  2. Bree's Avatar
    Posts : 18,617
    10 Home x64 (20H2) (10 Pro on 2nd pc)
       #2

    @simrick may have some ideas, but I wouldn't hold you breath....

    Posted 13 October 2018 - 10:42 AM
    As I previously noted, only the very first version of Hermes was decryptable....there is no known method to decrypt files encrypted by Hermes 2.x...
    ...If possible, your best option is to restore from backups, try file recovery software or backup/save your encrypted data as is and wait for a possible solution at a later time.
    Hermes Ransom Help Support Topic (DECRYPT_INFORMATION.html Ransom Note) - Page 3 - Ransomware Help & Tech Support
      My Computers

  3. Compumind's Avatar
    Posts : 2,715
    Windows 10 Pro x64, Various Linux Builds, Networking, Storage, Cybersecurity Specialty.
       #3

    souf07 said:
    Please tell me what to do are there any free software that i can use?
    Why not Windows Defender that comes with W10?
    You can also use the free version of Malwarebytes on demand.

    Please check on this too...

    Code:
    https://www.top10bestantivirus.com/best-free-antivirus
    Code:
    https://www.techradar.com/news/the-best-free-anti-ransomware-tools
    Make sure that each software covers Ransomware as part of the offering. Usually, it is.

    Cheers!
      My Computer

  4. Bree's Avatar
    Posts : 18,617
    10 Home x64 (20H2) (10 Pro on 2nd pc)
       #4

    Compumind said:
    Why not Windows Defender that comes with W10?
    You can also use the free version of Malwarebytes on demand.
    While those can remove the infection, they cannot decrypt the user files

    It is (just) possible that file recovery software may be able to find the original files. The ransomware would have copied each file to an encrypted version then deleted the original. It may be possible to recover those.

    The best protection would have been regular backup though...
      My Computers

  5. Compumind's Avatar
    Posts : 2,715
    Windows 10 Pro x64, Various Linux Builds, Networking, Storage, Cybersecurity Specialty.
       #5

    Bree said:
    While those can remove the infection, they cannot decrypt the user files.
    Exactly. I was just pointing out some free alternatives on a clean system.
      My Computer

  6. Compumind's Avatar
    Posts : 2,715
    Windows 10 Pro x64, Various Linux Builds, Networking, Storage, Cybersecurity Specialty.
       #6

    Bree said:
    It is (just) possible that file recovery software may be able to find the original files. The ransomware would have copied each file to an encrypted version then deleted the original. It may be possible to recover those.
    Possible, but I would use a sandbox on a separate, well fortified system to explore them.

      My Computer

  7. simrick's Avatar
    Posts : 16,108
    W10Prox64
       #7

    Hi.
    As Bree quoted, Bleeping Computer is your best bet for staying informed on the various ransomware and if they are defeatable or not. If version 2 is indeed what you have, then I would suggest the following, if you do not have a backup to restore from:

    (You can identify your specific ransomware here: ID Ransomware)

    As Bree also said:
    It is (just) possible that file recovery software may be able to find the original files. The ransomware would have copied each file to an encrypted version then deleted the original. It may be possible to recover those.

    1. Grab an empty drive, at least as large as the drive that has been encrypted, and do a sector-by-sector copy of the entire encrypted drive to the clean drive, including all free space. Store this away, in case a decryption algorithm is developed in the future.
    2. Run a recovery program on the encrypted drive to see if you can in fact recover the old files which were deleted by the ransomware. Recuva may be a good place to start. If you find it is seeing some of your deleted files, you may have to move to a paid recovery program, like MiniTool Data Recovery. You will need another empty drive on which to put the recovered files.

    It's pretty easy to get rid of the ransomware infections, but you need to make sure you've done everything else first.
      My Computer

  8. Bree's Avatar
    Posts : 18,617
    10 Home x64 (20H2) (10 Pro on 2nd pc)
       #8

    Thanks @simrick, some very good advice for @souf07
      My Computers

  9. Compumind's Avatar
    Posts : 2,715
    Windows 10 Pro x64, Various Linux Builds, Networking, Storage, Cybersecurity Specialty.
       #9

    Just a suggestion...

    If you need a great file recovery program, take a look a this -

    Code:
    http://www.condusiv.com/products/undelete/
    You can get a free trial and assess...

    FWIW.
      My Computer

  10. hello10's Avatar
    Posts : 204
    Windows 10 Home x64
       #10
      My Computer


 
Page 1 of 2 12 LastLast

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 20:46.
Find Us




Windows 10 Forums