Do I need a new SSD after getting hacked? STOP/DJVU

About 40 days ago, I downloaded a sketchy file on my PC and it was a trojan. It downloaded as a zip file and once I extracted it countless executable files started to run and my PC slowed down a bit. So, I restarted it and found that somebody had posted on my Instagram account. Then, I opened my file explorer, and unfortunately, every single file, except windows files, had been encrypted.

The next day I found out that this was the STOP/DJVU ransomware, which is the most common ransomware type. I tried many things but I am sure I cannot get back my files for at least another five years. Now, I just want to start fresh on my PC.

So, is it ok to just reinstall windows or do I need to buy a new SSD? Also, do I need to buy a new windows key or just a clean reinstall with formatting will be ok? I just want every file to be deleted so once I start over there isn't anything else. Also, I don't think that anybody has access to the pc, just the data. But let's say somebody does, what do I need to do then?

Try running these tools in order
STOP Djvu decryptor - Emsisoft: Free Ransomware Decryption Tools

SFC scan would also be a good idea as it would replace any infected system files

You would also want to run MSERT
https://learn.microsoft.com/en-us/mi...o365-worldwide

- - - Updated - - -

Also if you have the zip file still or know the download link then scan it with Virus total and paste the link here as it would help to know what Malware it is so that we can tailor towards cleaning the PC.

If you are going to reinstall windows then formatting the drive means that it will be fine for further use just do a multi pass format on the drive.

1) You don't need a new hard drive like an SSD. Unless the ransomware touches disk firmware (software on the hard drive chip) which is doubtful. But some very sophisticated malware can...

2) If you own a Windows product key or Windows installation media, you can reinstall. The Windows boot media will give you the option to delete and then partition the whole drive, do so.

Depending on the malware, it's typical to write zeros to the entire drive, but I don't think it's really necessary in this case.

Next time scan ALL downloads at VirusTotal. (Even images believe it or not. But that's REALLY going out there in most cases). The general consensus is four hits and you toss/delete. But it depends on what you have and your ability to know how to read the included Relations and Behaviors. If you're not very computer savvy (admit it) and VirusTotal has that scanned download marked with at least four anti-virus engines, then pres and hold the Shift key and delete the file on site. Sometimes false positives at VirusTotal are possible due to the sheer number of virus engines used for scanning and their ability to reliably indicate real malware or not. Don't trust any comments posted to VirusTotal. At least take them with a grain of salt. Or as I like to say, a mine cart of salt. Meaning, be suspicious of the comments.

Assuming it sounds like a self extracting Archive that means there could be all sorts of malware not just the ransomware, run those tools or multi pass the drive.

F22 Simpilot said:

Depending on the malware, it's typical to write zeros to the entire drive, but I don't think it's really necessary in this case.

I'm not sure I understand what this means.

And also what do I need to be suspicious of in the comments?

hamza8978 said:

I'm not sure I understand what this means.

And also what do I need to be suspicious of in the comments?

What it means is format the drive with a utility that will write all 0's on it which overwrites anything on it. And no you do not need to go out and get a new hard drive because you got hit with malware. Also nothing to be suspicious of in the comments.

bro67 said:

What it means is format the drive with a utility that will write all 0's on it which overwrites anything on it.

do you know any?

Bree said:

You shouldn't write 0's to every sector of an SSD, it shortens its life. If this SSD is the Samsung 970 Evo Plus in your specs then you can use Samsung Magician to perform a Secure Erase. This will create a bootable usb, boot from this to erase the SSD completely.

Yes, it is the same 970EVO Plus.
To summarise, can I have the steps in order to do this?
(formatting and reinstalling windows)
Also, do I need a new windows key or can I use the same one I used last time?