lostpearltwo Posted May 16, 2019 Report Share Posted May 16, 2019 a virus infected my pc and a lot of files are encrypted my files end now with : yztmyslnb i do not know what to do plz help if u can Link to comment Share on other sites More sharing options...
stapp Posted May 16, 2019 Report Share Posted May 16, 2019 It is recommended to upload a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with to this site here:https://id-ransomware.malwarehunterteam.com/ You can paste a link to the results into a reply so that one of our experts can review them. Link to comment Share on other sites More sharing options...
lostpearltwo Posted May 16, 2019 Author Report Share Posted May 16, 2019 thanks for the fast answer but this is my first time with this kind of virus so i deleted the ransom note with out knowing that it is important Link to comment Share on other sites More sharing options...
Amigo-A Posted May 16, 2019 Report Share Posted May 16, 2019 Hello Such a random extension could be the result of a GandCrab Ransomware attack. Therefore, if you deleted a note after reading it, then perhaps remember this word "GandCrab", because it is written in the title of the ransomware message. Still, if you do not remember anything that was in the note, then it is possible that the malicious file is still on your PC in the archive that you downloaded before launching the malicious content. Look in the downloads, you can transfer all the archives with the programs and the recent exe-files to any cloud storage and by your link to these files we will look at all the files for harmfulness and relevance to the similar attack. Only it must be done in the current day, later it will go to the background and I cannot already help you. Link to comment Share on other sites More sharing options...
Amigo-A Posted May 18, 2019 Report Share Posted May 18, 2019 For previous versions, there is GandCrab v5.1 Decryptor. Your files may have been encrypted an early or latest version that is not yet decrypted. But before you hurry to do decrypt the files, you need to make sure that there is neither this infection nor any other infection on the PC. We have seen cases when those who suffered from previous versions successfully decrypted files, but then they were attacked by the same encryptor, which encrypted files with a different extension, and used an encryption key that cannot be calculated. In punishment for haste and complacency, the user lost his files a second time and, possibly, forever. As experience shows, very often after encryption on a PC, this or another infection remains, which you could get together with the encryptor. Malicious programs often work in groups: trojans of a different type, password hijackers, backdoors, dormant malware, dangerous browser plugins. Therefore, I advise you to check your PC for active and dormant malware. This can be done here in the forum in the next section. You can also download the free tool Emsisoft Emergency Kit yourself and check the computer. Link to comment Share on other sites More sharing options...
Recommended Posts