Crownighter

Do the encrypted files carry the virus?

Recommended Posts

So I got infected with ransomware and the file format is .alka. As far as I've read there is no hope of decrypting them for now since it's a newer way of encrypting.
Furthermore my ID doesn't end on t1 :( .

I've uploaded some files on flash drive just in case there's a decryption for them one day, but I want to know - is there the danger that the files themselves might transmit the virus? I don't want plugging in the USB in a PC (after reinstall of OS) and then infecting it again. The files are a bunch of photos, nothing from the system drive. 

Share this post


Link to post
Share on other sites

This is new variant of STOP Ransomware

In the future, can only decrypt files that are encrypted using offline keys and have an offline ID, respectively.

 

Share this post


Link to post
Share on other sites

If you suspect that the infection is still on your PC, you need to check Windows with antivirus tool and eliminate the threat.

Emsisoft Emergency Kit
https://www.emsisoft.com/en/home/emergencykit/ 

FRST (Farbar Recovery Scan Tool)
https://help.emsisoft.com/en/1738/how-do-i-run-a-scan-with-frst/ 

Attach the results of the scan  to your new message. Support specialists will look at the logs and tell you what to do next.

Share this post


Link to post
Share on other sites

The encrypted files themselves are not malicious and cannot infect another system. However, STOP Djvu comes with several other malware that could have dropped themselves to the flash drive theoretically. They would still have to be some sort of executables that you actually run on another computer in order to infect them.

  • Thanks 1

Share this post


Link to post
Share on other sites
1 hour ago, Demonslay335 said:

The encrypted files themselves are not malicious and cannot infect another system. However, STOP Djvu comes with several other malware that could have dropped themselves to the flash drive theoretically. They would still have to be some sort of executables that you actually run on another computer in order to infect them.

Thanks, this is what I wanted to know. 

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.