Arman 0 Posted May 16, 2019 Report Share Posted May 16, 2019 i need help... my file change to codnat extention i search decrypt file tool for codnat, but no one can't fix that codnat... Quote Link to post Share on other sites
GT500 853 Posted May 16, 2019 Report Share Posted May 16, 2019 I recommend uploading a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with:https://id-ransomware.malwarehunterteam.com/ You can paste a link to the results into a reply if you would like for me to review them. Quote Link to post Share on other sites
Amigo-A 136 Posted May 18, 2019 Report Share Posted May 18, 2019 Arman Before you decrypt the files, you need to make sure that there is neither this infection nor any other infection on the PC. We have seen cases when those who suffered from previous versions STOP Ransomware successfully decrypted files, but then they were attacked by the same encryptor, which encrypted files with a different extension, and used an encryption key that cannot be calculated. In punishment for haste and complacency, the user lost his files a second time and, possibly, forever. As experience shows, very often after encryption on a PC, this or another infection remains, which you could get together with the encryptor. Malicious programs often work in groups: trojans of a different type, password hijackers, backdoors, dormant malware, dangerous browser plugins. Therefore, I advise you to check your PC for active and dormant malware. This can be done here in the forum in the next section. You can also download the free tool Emsisoft Emergency Kit yourself and check the computer. Quote Link to post Share on other sites
ImBruce 0 Posted May 19, 2019 Report Share Posted May 19, 2019 I am with the same type of CODNAT encryption, but I have already restored the PC and pass the emissoft anti malware where it says that my PC is clean I think Quote Link to post Share on other sites
GT500 853 Posted May 20, 2019 Report Share Posted May 20, 2019 On 5/19/2019 at 7:19 PM, ImBruce said: I am with the same type of CODNAT encryption, but I have already restored the PC and pass the emissoft anti malware where it says that my PC is clean I think That is more than likely a variant of the STOP ransomware. ID Ransomware can confirm that, and can let you know if STOPDecrypter can recover your files. Here's a link to ID Ransomware:https://id-ransomware.malwarehunterteam.com/ If STOPDecrypter can't recover your files, then note that it can still be used to get information that may be able to help the creator of STOPDecrypter figure out your decryption key. Here's a link to instructions on how to get this information with STOPDecrypter:https://kb.gt500.org/stopdecrypter Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.