Files encrypted

epsnarayanan · 10 Apr 2020

Dear Experts, I know that it is irrelevant to raise this type of queries in the platform, but can anyone please help me to solve the problem I faced. Some time back, all image files (.jpg) in different folders have been encrypted with .adobe files (i.e. IMG-20170710-WA0001.jpg.adobe). Some Excel, Word & PDF files have also encrypted). Since then I am trying to get repaired the corrupted files but in vain.

FYI, this was happened in my old Laptop wherein, I guess, some Ransomware attacked on my Laptop and they asked huge money. I copied all such effected files into an external hard disk. Now I am using another Laptop with a licenced antivirus protected.

Thank you very much and appreciate for your reply

Barman58 · 10 Apr 2020

Before you can do anything to recover your files from a ransomware attack you need to know exactly what the particular ransomware is or was. There are specialists on the net that may be able to help you (and the good ones do not charge (although most of the sites hosting the experts would appreciate a donation to help with running costs). You need to gather together as much information that you can, including copies of any messages that you were given by the ransomware. once you have as much as possible I would suggest you join up at Bleeping Computer and ask for help there, they are one of if not the best malware sites on the net. They may be able to ID your strain of ransomware and have a solution, or they may be able to write a custom solution for your issues

Caledon Ken · 10 Apr 2020

I know this doesn't help with current situation ......

Please start backing up your computer, at a minimum your data, and keeping multiple versions of your backups.

Backups to be backups must be disconnected from machine (s) when not in use.

I use multiple targets and multiple versions.

The issue of Ransomware is only getting bigger.

epsnarayanan · 10 Apr 2020

Thank you very much for your prompt reply. As mentioned before, suddenly all folders, containing most of them image files were encrypted and the extension of the files changed to .jpg.adobe. And could not open at all. In all the folders, a .txt file also appeared which is as follows:

--------------------------------------------- ALL YOUR FILES ARE ENCRYPTED ----------------------------------------------- Don't worry, you can return all your files!All your files documents, photos, databases and other important are encrypted with strongest encryption and unique key.The only method of recovering files is to purchase decrypt tool and unique key for you.This software will decrypt all your encrypted files.What guarantees you have?You can send one of your encrypted file from your PC and we decrypt it for free.But we can decrypt only 1 file for free. File must not contain valuable information.You can get and look video overview decrypt tool:The page you were looking for doesn't exist (404) of private key and decrypt software is $980.Discount 50% available if you contact us first 72 hours, that's price for you is $490.Please note that you'll never restore your data without payment.Check your e-mail "Spam" folder if you don't get answer more than 6 hours.---------------------------------------------------------------------------------------------------------------------------To get this software you need write on our e-mail

dfhelp@india.comReserve e-mail address to contact us

dfhelp@firemail.ccYour personal ID:028NK6enKP6qGK7zydcwHtghAXAzwWUnBfMFB9NxnEm

I kept all files in a external hard disk.
Thanks and regards

Caledon Ken · 10 Apr 2020

Have you scanned all your devices with Malwarebytes available at malwarebytes.com.

I think Barman's advice is correct, you need someone really well versed in un-encrypting ransomware infections.

Any chance you have a backup on another external.

FreeBooter · 10 Apr 2020

Boot your computer into Safe Mode and type rstrui.exe into Start Menu search box. Hopefully you can restore Windows to a date when your computer was clean.

You can also use ShadowExplorer.com - Downloads to recover your encrypted files.

My suggestions only works if Ransomware have not deleted or encrypted restore points.