0

All my files have been encrypted with locky virus: I tried CCleaner, M.S. Forefront, and some other antimalware programs;

Can anyone give me some advice about this virus removal?

Emanuel
  • 57

2 Answers2

1

If they've really been encrypted, you personally can't do anything to recover the encrypted data.

For the future, make frequent backups, and consider using Linux (or a VM) if you must visit shady websites and/or run unknown software often.

You'reAGitForNotUsingGit
  • 692
-2

It depends on the virus. There are many viruses that just claim something that is not fully true. There are 3 major possibilities:

  • the disk (some files of it) is really encrypted and the key is send to its creators (as it is claimed). In this case the creators will restore your data, when you do what they want. No other options for you.
  • the disk (some files of it) is encrypted, but the key is located on your disk. In this case, there is a possibility to restore your data without the creators, but by specialized software.
  • the disk (some files of it) is encoded, not encrypted. In this case, the data could be restored easier than the other ways. This could be done by specialized software, with lower complexity.

The first option is the most scary but it is the most difficult to implement. Restoring of the data from creators is difficult for them. So this is not the most common option.

A nice plan for you is:

  1. to identify the virus and its strain. If it do not tell you its name, search in google with some exact string message it displays - with quotation marks.
  2. to search google for virus-dependent and strain-dependent solution.
JRr
  • 454