DesignerScott

Kevin, Most of the files that do not open are PDF files of scanned items or Photos and are not large files, way under that limit. When I try to open them I get the Adobe Error Message: Files are damaged and cannot be opened. If that is something that cannot be fixed, I can live with that. Otherwise everything else is working again. Cannot thank you enough..... Scott

Kevin, I can safely say that I have recovered the vast majority of the files!!!!!!!!!!!!!!!!!!!!! Have no Clue how tot hnak you. There are now duplicate files for everything, an encrypted file and a new unlocked file. Most everything opened, with the exception of quite a few PDF files as Adobe says the file is damaged and cannot be opened. This includes some pictures but not all of them. Not sure what next we should do if anyhting. please advise. Scott

Kevin, Did not see the repair email before I sent the reports prior..sorry about that. Si did as requested...attached is the fix log report hopefully good news in this report. Next Step? Scott Fixlog.1.27.2017.11.29am.txt

Posted Wednesday at 20:48 · Report post Kevin Zoll Malware Removal Support Emsisoft Employee 248 17255 posts LocationDepauville, NY, USA OS:Windows 10 HIPS:Windows Firewall Other:WinPatrol Plus Posted Tuesday at 16:11 · Report post Scott, Let's take a fresh look. Run fresh scans with Emsisoft Emergency Kit (EEK) and FRST, attach the new EEK and FRST scan logs to your reply. My Reply of 1/27/2016 Kevin all of the scans you asked for were attached along with the RogueKiller Reports Scott FRST scan report 1.24.2016.txt THIS IS THE FRST REPORT I RAN ON 1-24-2017 rk_3BFA.tmp1.24.2017.txt rk_63D6.tmp Rogue Report.txt rk_77AD.tmp 1-24-2016.txt scan_170124-162116 1.24.2016.txt THIS IS THE SCAN REPORT ON 1-24-2017 Both reports said they found nothing in them. I am reattaching them Belowf scan_170124-162116 1.24.2016.txt FRST scan report 1.24.2016.txt

Kevin Zoll Malware Removal Support Emsisoft Employee 248 17255 posts LocationDepauville, NY, USA OS:Windows 10 HIPS:Windows Firewall Other:WinPatrol Plus Posted Tuesday at 16:11 · Report post Scott, Let's take a fresh look. Run fresh scans with Emsisoft Emergency Kit (EEK) and FRST, attach the new EEK and FRST scan logs to your reply. Kevin I replied to email but apparently it did ot go thru..... all the files and reports are run and attched.... for your review...hopefully this will help. Scott FRST scan report 1.24.2016.txt rk_3BFA.tmp1.24.2017.txt rk_63D6.tmp Rogue Report.txt rk_77AD.tmp 1-24-2016.txt scan_170124-162116 1.24.2016.txt

So I stop Frst64 Repair after 72 hours...as suggested I download the RogueKiller 64 bit program and ran the scan....did not fix anything just saved the Report which is now attached.... Let me know if this helps ina ny way. Scott rk_63D6.tmp Rogue Report.txt

Kevin, I ran all the reports again and they all say there are no threats. I have copied and re-pasted the fixtxt in the downlaod section of the computer. I opened the frst64 application , hit the fix button and the program ran "running" now for almost 24 hrs....do I just let that go??

So I finally figured out that the fixlist.txt file needed to be in the same download file as the frst64.exe file. so I went to the file folder and placed the fixlist.txt file under use/scott/download then I went to the download icon on file and opened the FRST64.exe file; opened file to ad to hard drive The FARBAR Recovery Scan dialog box opened; clicked fix once as instructed and it began the fix without rejecting the option as it had in the past when it could not find the fixlist.txt file completed the fix in about 90 seconds gave the recovery report as noted and attached below Nothing asked for updates or restarts. I restarted the computer Hoping that that id have access to all my files again. No Such Luck 4 hours of running all the fixes suggested and I am still fully encrypted. all the repoarts are attched above files that were given copies of files are still crypted. not sure what to think at this point. Scott

So I finally figured out that the fixlist.txt file needed to be in the same download file as the frst64.exe file. so I went to the file folder and placed the fixlist.txt file under use/scott/download then I went to the download icon on file and opened the FRST64.exe file; opened file to ad to hard drive The FARBAR Recovery Scan dialog box opened; clicked fix once as instructed and it began the fix without rejecting the option as it had in the past when it could not find the fixlist.txt file completed the fix in about 90 seconds gave the recovery report as noted and attached below Nothing asked for updates or restarts. I restarted the computer Hoping that that id have access to all my files again. No Such Luck 4 hours of running all the fixes suggested and I am still fully encrypted. all the repoarts are attched above files that were given copies of files are still crypted. not sure what to think at this point. Scott Fixlog report.txt AdwCleaner[C0] Log Report.txt JRT log report.txt fixlist2.txt

Sorry I am bit frustrated here....I have ran all the things in the directions....saved all the logs to the desktop... Directions now say>>>>> Close Notepad. I did this NOTE: It's important that both files, FRST64 and fixlist.txt are in the same location or the fix will not work. Where ids this sup[posed to be saved to??? NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to your operating system Run FRST64 and press the Fix button just once and wait. I can find the FRST file but not an FRST64 file!!! Where is this? or is it under another title/name? SO I found the original download, which gives me the dialog box and the "FIX" option but it says there is no Fixlist.txt! I have tried putting it in the C: drive does not work I have dropped into the FRST file on the c drive, lands in Hives and does not work! SO not sure how to get the fixlist.txt into the dialo box to get it to fix! If the tool needed a restart please make sure you let the system restart normally and let the tool complete its run after restart. The tool will make a log on the Desktop (Fixlog.txt). Attach it to your reply.

never mind it now seems to be running something on its own....

so i am following your instructions ... did adwcleaner....attached is the report... did the Junkware Removal tool....it gove me an update box in black and white...then ask for updates...hit enter asks for restoration point needs answer here as nothing happens at this point....what do i do???

so i am following your instructions ... did adwcleaner....attached is the report... did the Junkware Removal tool....it gove me an update box in black and white...then ask for updates...hit enter asks for restoration point needs answer here as nothing happens at this point....what do i do??? AdwCleaner[C0] Log Report.txt

the files are definitely in encrypted here is an example of a file does the work above still seem to be the best options after seeing the files below?? this is just a fraction of the files effected. Thanks Scott Addtional Cover sheet notes..docx.crypted As-Built Master Bedroom.docx.crypted authorization.docx.crypted Authorization.pdf.crypted Bradenstein Dwg Files.zip.crypted Brandenstein Plan Check Elevations.pdf.crypted Brandenstein Plan Check Floorplan.pdf.crypted Brandenstein Plan CVR_SITE (1a).pdf.crypted Brandenstein T-24 Forms.pdf.crypted Brandenstein T-24 Report.pdf.crypted Brandenstein_AB_Lwr_Lvl_Plan_111213 AB_LWR LVL BDRM (revised).pdf.crypted Brandenstein_Elev_111213 MSTR BTH ELEV 1 (revised).pdf.crypted Brandenstein_Plan_011514 - Standard.zip.crypted

My Computer has been encrypted...paid the ransom buy never got a decrypt key..really hope to get the data back. Scan 12.29.2016.txt FRST.txt Addition.txt