Skip to content

Konstantinos Tsoukalas

Konstantinos is the founder and administrator of Wintips.org. Since 1995 he works and provides IT support as a computer and network expert to individuals and large companies. He is specialized in solving problems related to Windows or other Microsoft products (Windows Server, Office, Microsoft 365, etc.).

131 Comments

  1. Prabhat
    July 25, 2019 @ 6:30 pm

    how can i decript novasof ransomware virus from my .dwg file

    Reply

  2. Nithin
    April 12, 2019 @ 8:09 am

    Hi all my photos are affected by a virus and I am not able to open them, it's very important pics.

    The file extension is like .JPG.taywuwpofp.

    Can somebody help me in recovery of my pics plz

    Reply

  3. RendszergazdaNyh
    September 10, 2017 @ 10:26 am

    Hello!

    One can tell someone to decrypt the encrypted file which has been renamed as follows:
    .

    For example.:

    I've tried "Rannoh decryptor" but I did not succeed, the error message was:
    17: 44: 05.0961 0x158c Can not initialize on pair
    17: 44: 05.0961 0x158c Can not init decryptor

    Reply

    • lakonst
      September 11, 2017 @ 11:28 am

      @RendszergazdaNyh: Go to ID Ransomware and upload the Ransom Note and a Sample of an Encrypted file, to identify the ransomware name/variant and -if exists- a decrypter tool.

      Reply

      • RendszergazdaNyh
        September 12, 2017 @ 2:18 pm

        Hello!

        I tried but did not recognize it.
        The homepage message .: "Unable to determine ransomware".

        Otherwise my first message was missing the file pattern…

        Filename: 5-10 random characters
        Extension: 2-5 random characters

        The example.:

        0y36a.t4
        82bboay8.s6
        9pqa0gvbh9.n60
        aj5y4.lx4v5
        1nd5nd8o7.ogdq9

        Is not this so familiar to someone?

        Reply

  4. ali
    July 16, 2017 @ 7:44 pm

    Hi to all,
    yesterday my files encrypted by ransom and files extension changed to ".goro" with a html file name which its name is : "how_to_back_files.HTML" and email address is "mk.goro@aol.com" is it any decryption tool for this ransom-ware ?

    Thanks.

    Reply

  5. Blaise
    April 18, 2017 @ 12:30 am

    Hello All,

    My system have been also attack and extension of all files and system files are now .AES_NI_0DAY

    Please what is the good tool to restore my file. I don't have a backup.

    thanks

    Reply

    • lakonst
      April 18, 2017 @ 5:18 pm

      @Blaise: Unfortunately there is not exist a free decryptor tool for this type of ransomware.

      Reply

  6. rina
    February 3, 2017 @ 11:20 pm

    Is there some solution already for Cryptowall 3 decoding?

    Reply

    • lakonst
      February 4, 2017 @ 10:26 am

      @rina: Unfortunately -until today- is not possible to decrypt Cryptowall encrypted files.

      Reply

  7. Hanny
    January 9, 2017 @ 1:49 am

    hello … I've just received a ransomware virus badnews … I want data back … can anyone please give my solution because data is very important. I received this virus when sending e-mail documents. My document change to how to encrypted file .hta

    Reply

  8. Luca
    January 4, 2017 @ 11:26 am

    Ciao nel mio pc son stati crittografati i file con estensione .a998, è gia in giro qualche tool decrypter ? Grazie

    Reply

    • lakonst
      January 5, 2017 @ 10:11 am

      @Luca: Unfortunately I don't know this type of ransomware. Go to ID Ransomware and upload the Ransom Note and a Sample of an Encrypted file, to identify the ransomware name/variant.

      Reply

  9. md
    December 25, 2016 @ 4:56 pm

    Thank you!!! the tools mentioned here saved my a*s.

    Reply

  10. Ariane
    December 16, 2016 @ 6:32 pm

    Oh my God … so there's nothing to do. T_T

    Reply

  11. Ariane
    December 15, 2016 @ 7:49 pm

    Hi, thank you for replying. I used ID Ransomware and appreciated the following message:This ransomware has no known way of decrypting data at this time.
    It is recommended to backup your encrypted files, and hope for a solution in the future.
    I really don't know what to do now.

    Reply

    • lakonst
      December 16, 2016 @ 6:30 pm

      @Ariane: If you don't have clean backups, then hope for a solution in the future.

      Reply

  12. Yaser
    December 14, 2016 @ 2:50 pm

    Hi, All my excel, word, JPEg files have automatically added with .crypted in the network places while in the Desktop, Documents where files are perfectly okay. i could not able to view the files now. Can you please suggest me to restore all my files.

    Reply

    • lakonst
      December 15, 2016 @ 1:16 pm

      @Yaser: The encrypted files are located on another computer on your network, not in yours. Find and disconnect the infected computer (with the encrypted shared files) from the network. Then try to decrypt the encrypted files with the Trend Micro Ransomware File Decryptor tool. (run the tool on the infected computer)

      Reply

  13. Ariane
    December 14, 2016 @ 10:45 am

    Please, I need a lot of help, my files are with the extension: A56C and I don't know which virus this is and how to remove it.

    Reply

    • lakonst
      December 14, 2016 @ 2:44 pm

      @Ariane: Go to ID Ransomware and upload the Ransom Note and a Sample of an Encrypted file, to identify the ransomware name/variant.

      Reply

  14. Herman
    November 14, 2016 @ 5:37 pm

    This is the message in the .TXT file

    ===============================================================================
    !!! we coderen uw bestanden met Crypt0L0cker virus !!!
    ===============================================================================

    Uw belangrijke bestanden (inclusief die op het netwerk schijven, USB, etc):
    foto's, video's, documenten, enz. werden gecodeerd met onze Crypt0L0cker virus.
    De enige manier om uw bestanden te herstellen is om ons te betalen. Anders zal
    uw bestanden verloren gaan.

    Om uw bestanden te herstellen moet u betalen..

    Om uw bestanden te herstellen opent u onze website
    htttp://anbqjdoyw6wkmpeu.tormidle.at/ce7fase.php?user_code=eezdar&user_pass=1029
    en volg de instructies.

    Als de website niet beschikbaar is kunt u als volgt te werk:
    1. Download en installeer TOR-browser: htttps://www.torproject.org/download/download-easy.html.en
    2. Na de installatie voert u de browser en voer het adres: htttp://anbqjdoyw6wkmpeu.onion/ce7fase.php?user_code=eezdar&user_pass=1029
    3. Volg de instructies op de website.

    ===============================================================================

    Reply

  15. Herman
    November 14, 2016 @ 3:26 pm

    Hello, in september my computer is infected by a virus, but i don't know what kind. a lot of files has been renamed like .enc and encrypted. and every folder has 2 files "HOW_TO_RESTORE_FILES.HTML" and HOW_TO_RESTORE_FILES.TXT". I tried several decryption tools but with no succes. Who can help me?

    Reply

    • Herman
      November 14, 2016 @ 3:30 pm

      I found a possible name for the virus: Cryptohasyou.

      Reply

    • lakonst
      November 14, 2016 @ 3:57 pm

      @Herman: Probably your 're infected by Crypt0l0cker or TorrentLocker and unfortunately until today there is no way to recover your files for free.

      Reply

      • Herman
        November 14, 2016 @ 4:26 pm

        Thank you. Do you think that a decrypt tool will be come available?

        Reply

        • lakonst
          November 15, 2016 @ 11:35 am

          @Herman: I don't know if a decryptor tool become available. If you want to find out the exact name of virus navigate to ID Ransomware website and upload a sample of an encrypted file and the ransom note.

          Reply

      • Herman
        November 14, 2016 @ 4:28 pm

        And how can i check if it is the Crypt0l0cker or the Torrentlocker?

        Reply

  16. kushagra rai
    November 13, 2016 @ 2:19 pm

    my doc, pdf and jpeg files are corrupt and they dont open. the file type is changed to
    (.0117F51D_luck) extension.
    how to repair these files and i dont have backup nor i can restore system because no secure point is there to restore.
    please help me!!

    Reply

    • lakonst
      November 14, 2016 @ 9:49 am

      @kushagra rai: Unfortunately there is not exist a free decryptor tool for this type of ransomware.

      Reply

  17. Gaarzen
    November 11, 2016 @ 3:58 am

    Just got a CERBER4 ransom virus myself.. All files end with .b7a7 and couldn't find a solution yet :\

    Reply

    • lakonst
      November 11, 2016 @ 9:53 am

      @Gaarzen: Unfortunately there is not exist a free decryptor tool for CERBER 4.0 until today.

      Reply

  18. ferydon babaei
    October 26, 2016 @ 10:51 pm

    My doc , picture files , pdf and ppt files have all been encrypted by cerber ransomware and the extension has been changed to .a83c. Is there a tool to decrypt these?

    Reply

  19. Punit Gattani
    October 24, 2016 @ 11:56 am

    My files encrypted by cerver4. All files converted in . exaple 07wOqQurs5.83e5

    Reply

    • lakonst
      October 24, 2016 @ 1:13 pm

      @Punit Gattani: As I know there is not a free decryptor tool for cerber4 encrypted files.

      Reply

      • Punit Gattani
        October 25, 2016 @ 11:39 am

        Should we expect solution for this in near future . So that i keep backup of all files.

        Reply

  20. Alen
    October 21, 2016 @ 8:51 pm

    Hello! My computer is infected with .crypted ransomware. I’ve used these methods:
    – ShadowExplorer ( http://www.shadowexplorer.com/downloads.html )
    – Manual guide ( http://manual-removal.com/crypted/ )
    – TrendMicro tool (https://success.trendmicro.com/solution/1114221)
    But nothing works for me. Is there a chance to decrypt my files?

    Reply

  21. pratibha bhogun
    October 20, 2016 @ 9:00 am

    8150811044…this is my whats app no….. if u saw my msg ……so reply in whats app and suggest me something to slove my problem……

    Reply

  22. pratibha bhogun
    October 20, 2016 @ 8:48 am

    Actually i downloaded shadedecrpter and rannohdecryter and rakhnidecrpter…but its not scanning….its shows waring like specify the original copy of the specified file is required for successful decryption…

    Reply

  23. pratibha bhogun
    October 20, 2016 @ 8:34 am

    my files names like ADeRa6yXxd and ceber ramsomware..

    Reply

  24. pratibha bhogun
    October 20, 2016 @ 8:32 am

    my files names like ADeRa6yXxd

    Reply

  25. Jiten
    October 13, 2016 @ 7:00 am

    All of my files got infected with cerber ransomware with .bebc extension for which I am not able to find a decryptor tool. Can anybody help me to decrypt the files as I have some important data encrypted and I dont have any backup at all.

    Reply

    • lakonst
      October 13, 2016 @ 5:11 pm

      @Jiten: Unfortunately I don't know this ransomware.

      Reply

      • ardiles
        October 14, 2016 @ 4:13 am

        for me. you have?

        Reply

        • lakonst
          October 14, 2016 @ 4:55 pm

          @ardiles: Unfortunately no :(

          Reply

  26. ardiles
    October 13, 2016 @ 6:38 am

    hello,

    all my files were encrypted with file type as '.a294'. Any suggestions to convert.

    Reply

  27. Raihan
    October 12, 2016 @ 9:31 am

    Hi,
    My whole documents and photos have been encrypted by CERBER RANSOMWARE. How can I retrieve all my documents and photos as I dont have any kind of backup at all.

    Reply

  28. EnzoS.
    October 8, 2016 @ 8:01 am

    Ciao a tutti. Molto interessante quanto letto. Qualcuno di voi sa come decriptare i file locked?
    Mi sono stati criptati nel 2012.
    Magari ora c'è la possibilità di decriptare.
    Grazie a tutti.

    Reply

  29. shiva
    October 1, 2016 @ 5:07 pm

    hi,

    all my files were encrypted with file type as '.encrypted'. Any suggestions to convert.

    Reply

    • lakonst
      October 2, 2016 @ 9:39 am

      @shiva: Hello, the filenames are changed or not? Tell me the Ransom notes filenames.
      You can try with Rakhni Decryptor tool

      Reply

  30. Mobin
    September 28, 2016 @ 4:22 pm

    Which antivirus is best to remove the ransomeware virus ?

    Reply

    • lakonst
      September 29, 2016 @ 9:23 am

      @Mobin: Follow this guide to clean the ransomware and run Eset Online Scanner at the end.

      Reply

  31. Satish
    September 18, 2016 @ 10:21 am

    Dir Sir,
    My computer has been infected with .ceber3 extension encrypted all jpg file extension change, how to decrypt.ceber3

    Reply

    • lakonst
      September 19, 2016 @ 9:42 am

      @Satish: Unfortunately at this time there is no decryption tool for .ceber3

      Reply

  32. Charolette Alexander
    August 20, 2016 @ 5:37 pm

    Hi,
    My computer has been infected with Cryptowall virus since 12/1/15. Fortunately, the virus has been removed, however, I would like to know if you know of anything that could possibly decrypt the files that have been infected by Cryptowall virus? If so, I am in desparate need of your assistance. Thank you in advance for any assistance you are able to provide me at this critical time.

    Respectfully,
    Charolette Alexander

    Reply

    • lakonst
      August 22, 2016 @ 11:36 am

      @Charolette Alexander: Unfortunately at this time there is no a way to decrypt Crypotowall files.

      Reply

  33. Brian
    August 18, 2016 @ 4:13 pm

    Hi,

    Unfortunately opened an invoice from what i thought was a client changed all my dwg files and jpg to .mp3 files.

    How do I find out which of the above decryptors to use?

    Reply

  34. jaga
    August 13, 2016 @ 9:47 am

    cerber decrypt with trend micro it is working

    Reply

  35. YnnY
    August 3, 2016 @ 9:30 pm

    There is no solution yet. I recommend not to pay. After you pay to "space_rangers-at-aol.com the stop answer back. They block your email address. Sorry. Always Backup your files.

    Reply

  36. atif
    July 23, 2016 @ 1:10 pm

    my shared folders files are encrypted data Vegclass@aol.com.xtbl .how it can dycrypt?

    Reply

    • lakonst
      July 25, 2016 @ 9:19 am

      @atif: I don't know a decryptor tool for this ransomware. Try to restore your files with Shadow Explorer. Also scan your network (computers) to find the infection source.

      Reply

  37. jagan
    July 22, 2016 @ 1:30 pm

    sir

    Please let me know cerber ransomware decrypt tool immediately

    Reply

  38. AJIT
    July 17, 2016 @ 10:47 am

    @Lakonst,

    Hi Dear Yetserday only my all files got encrypted with .xtbl extension is there any way yet to decrypt this data??

    Reply

    • lakonst
      July 19, 2016 @ 9:43 am

      @AJIT: Unfortunately I don't know if there is exist a decrypter tool for this type of ransomware. Try to restore your files in previous version by using Shadow explorer.

      Reply

  39. Sonya
    June 28, 2016 @ 5:11 am

    Hello, I still need help. I am grateful for all the information that has been on here. My laptop was encrypted by CryptXXX (not sure what version.) Thank fully most Microsoft files and adobe are being decrypted using the Trend Micro link, but I am having no luck with any .jpg…. it shows a new file with the original name but it cannot be opened. Has anyone had any luck with anything working on .jpg??? I am desperate; I could not pay the ransom (not that I would have paid it) but one site said once they delete their key all hope is lost…. please, if anyone can help!

    Reply

    • kevin
      July 11, 2016 @ 3:37 pm

      you can try [rannohdecryptor.exe], little tool of Kaspersky. version 1.9.1.1.
      It decrypted most of my infected documents.
      Only a few cannot be decrypted. I don't know why.

      Reply

  40. Dave Toss
    June 26, 2016 @ 11:14 pm

    Hello Lakinst, thank you for the good post. I was infected with a virus and locked all my files, I paid the ransom, the hacker send me a dec.exe file, all what I need to do is to drag my file to the .exe and it decrypt them. This method worked for the smaller file. I have a large file over 4 GB ( database) that does not work. I'm able to extract the hacker .exe it contains 3 small files ( .data, .rdata and a small text file) do you know if any software that I can use along with the hacker file to decrypt the file? Thank you

    Reply

    • lakonst
      June 27, 2016 @ 10:44 am

      @Dave Toss: I don;t know any software to decrypt the file.

      Reply

      • Dave Toss
        June 27, 2016 @ 6:34 pm

        Thank you.

        Reply

  41. ahmed abd elgelil
    June 25, 2016 @ 12:57 am

    hi all,
    my laptop infected by .crypz any support please ?

    Reply

  42. Tauny
    June 23, 2016 @ 5:10 am

    I got mine encrypted, at the end of each file name is .crypted

    Reply

    • Ryza
      June 24, 2016 @ 4:30 am

      Try to do the advise of @lakonst up there. It works for me.

      Reply

  43. coca cola tt
    June 22, 2016 @ 3:27 pm

    Excellent article – recovered *.crypz ransomware files using Win 7 file restore as explained.

    A simple solution often overlooked.

    Reply

  44. kevin
    June 15, 2016 @ 11:32 am

    I have all my personal files encrypted a month ago. Today, with the tool [RansomwareFileDecryptor] many of them are decrypted. Thank to your efforts.
    And I think the malware is cryptXXX V2.
    However, some video files encrypted with the name "[original name].MOV.crypt" and "[original name].AVI.crypt" can not be decrypted. What should I do?

    Reply

  45. danny
    June 4, 2016 @ 9:23 am

    We have the .crypt virus also but cannot figure out which decryptor will work. Or rather whatever we tried does not work. Can anyone help us please how to get our files back. We did not have recovery or versions or shadow copy on. Thanks in advance for your help. Please we are desperate.

    Reply

  46. Ferin
    May 31, 2016 @ 1:04 pm

    Hi there,
    Thanks for sharing great information.
    I've been infected with Trojan Cryakl some weeks ago.
    I used "rannohdecryptor.exe" released by Kaspersky and recovered most of my files but it cannot recover xml, flv mkv, mp4, html and csv files.
    Do you have any idea to recover them?
    Thanks for your attention.
    Ferin.

    Reply

    • Sonya
      June 25, 2016 @ 11:01 pm

      Hey, glad everyone is willing to share information about this!!
      I tried using "rannohdecryptor" but it did not work for me at all. I did successfully use the following link for music & Microsoft files: http://esupport.trendmicro.com/solution/en-US/1114221.aspx Still a work in progress, however does not work on jpg files, so if anyone has any ideas please, please help! Thanks & good luck!!

      Reply

  47. Gero Manalili
    May 27, 2016 @ 12:03 pm

    Hi Ryza use EaseUS data recovery , it will work. im also from the philippines

    Reply

  48. Ryza
    May 26, 2016 @ 10:16 am

    Hello I came from the philippines ! I also facing that problem right now all my files extension is .crypt, My computer(Window 7) is recently infected . Last May 24,2016
    The problem is i dont have a clean back up and even shadow copy can't bring my original files back i also try spyhunter, teslacrypt etc.
    Please advice for possible solution . Thank you

    Reply

    • Raine
      May 28, 2016 @ 3:41 am

      Hi Ryza, I'm from the philppines too. I got the virus on the same day you got it. still looking for a way to decrypt the files. Have you fixed yours already?

      Reply

      • Ryza
        June 23, 2016 @ 8:00 am

        Raine Kindly Do the advice of lakonst . Im currently doing it. I hope all my files or not even all atleast 80% be recovered.

        Reply

    • khris
      June 9, 2016 @ 7:55 am

      Hi Ryza, did u find any solution?

      Reply

      • lakonst
        June 9, 2016 @ 9:40 am

        @khris: Try to decrypt files by using Using the Trend Micro Ransomware File Decryptor

        Reply

        • Ryza
          June 21, 2016 @ 6:06 am

          We successfully decrypt file but when we try to open it its corrupted :(

          Reply

          • lakonst
            June 21, 2016 @ 9:29 am

            @Ryza: Due to the advanced encryption of this particular Crypto-Ransomware, only partial data decryption is currently possible on files affected by CryptXXX V3, and you have to use a thrird party repair tool to repair your files like: http://www.stellarinfo.com/file-repair/file-repair-toolkit.php

          • Ryza
            June 21, 2016 @ 9:35 am

            Thank you for the information. I will also try this one .

          • Ryza
            June 23, 2016 @ 8:02 am

            Thank you for the information @lakonst :)
            I try to recover some of my files and viola ! it works . Im waiting for my other files to be recovered . Thank you so much for the information

  49. Hassan
    May 11, 2016 @ 2:58 pm

    Dear ,
    Thank you for sharing such information. Few days back my files are encrypted by "LMUWMG" viruses. All files are not change and not opening. Please share the best solution how i can get my files back. Please also reply me on (hassan.ahmed45@gmail.com).

    Regards,
    Hassan

    Reply

  50. Pavel
    April 27, 2016 @ 7:33 am

    Hi,
    i have used the Rannoh Decryptor, this work fine, only files larger 150MB can the program not decrypt. Im happy. My Comp. was with RSA-4096 infected.
    See:
    " NOT YOUR LANGUAGE? USE https://translate.google.com

    What happened to your files ?
    All of your files were protected by a strong encryption with RSA4096…"

    Reply

  51. Markus
    April 8, 2016 @ 4:12 am

    Hi, Thank you very much for helping people to find a way to solve this things. In my case, a computer was infected (exactly march 18th) with a virus that encrypted all the files without changing their original names. And created in all the infected folders, three files named RECOVER .png .HTML and .txt Is there a way to decrypt the files? Thank you very much

    Reply

  52. Hemant Ld
    March 26, 2016 @ 8:59 am

    Sir,
    I have .jpeg file taken form camera which was converted by virus with format like (v5saui7w.f0o30). Please suggest how to recover or decrypt this jpeg files

    Reply

    • lakonst
      March 26, 2016 @ 2:47 pm

      hi there. Unfortunately, The only method to get your files back is from a clean backup.

      Reply

  53. Arthur DYE
    March 26, 2016 @ 3:27 am

    Hello all the files well most of the files have had the extension changed to .lol and I have a text file named how to get data.txt the file starts off "Hello boys and Girls" any hope of getting these decrypted.

    Reply

    • lakonst
      March 26, 2016 @ 2:47 pm

      hi there. Unfortunately, The only method to get your files back is from a clean backup.

      Reply

  54. Manoj
    March 25, 2016 @ 1:51 pm

    Hi Lakonst;

    Thanks for all your efforts in guiding the Virus infectors!!!
    My Case is a pretty different one. I also got infected by the Crypto Virus.But I don't have any backup/restore points.I had formatted my Laptop and copied the files.But I am still unable to open the files. The Message I get is : "Windows Photo Viewer can't open this picture because either Photo Viewer doesn't support this file format,or you don't have latest updates to Photo Viewer". Can you guide me in getting my files back !!

    Reply

    • lakonst
      March 26, 2016 @ 2:46 pm

      hi there. Unfortunately, The only method to get your files back is from a clean backup.

      Reply

  55. Raluca
    March 21, 2016 @ 11:06 am

    Hello,
    My Windows 7 was infected with a ransom virus. It has encrypted all my files in all the directories and the following 2 files are added to all the directories :HELP_DECRYPT.TXT, HELP_DECRYPT.PNGI have tried most of the file recovery softwares mentioned online, please advice on how to recover my files.
    Thanks !

    Reply

    • lakonst
      March 21, 2016 @ 5:16 pm

      @Raluca: Your files are infected with Cryptowall v3.0 virus. Unfortunately at this time there is no decryption tool for CryptoWall files. Do you have a clean backup of your files to another media? If so, then clean your computer and then restore your files from the backup. If you haven’t a clean backup then try to restore your files from Shadow Copies (if the virus has not delete them yet). The last choice is to pay the ransom to get your files back, but it is risky because criminals are not trusted persons.

      Reply

  56. Priyanka Daga
    March 15, 2016 @ 10:14 pm

    Hi, i have got some very important video files in .mxf format, but have gotten encrypted and become .mxf.xml
    Im not sure what to do now,
    It is important to decrypt them, I need help and suggestion.

    Reply

    • lakonst
      March 16, 2016 @ 12:27 pm

      @ Priyanka Daga: Unfortunately I don't know how this virus acts. Do you have a clean backup of your files to another media? If so, then clean your computer first (by using this guide) and then restore your files from the backup. If you haven't a clean backup then use this guide to restore your files from Shadow Copies (if the virus has not delete them yet). The last choice is to pay the ransom to get your files back, but it is risky because criminals are not trusted persons.

      Reply

  57. Jia
    March 10, 2016 @ 8:42 am

    Hi, I really hope you can help me. My laptop got infected as all document files extension turned into mp3. I have very important excel sheets. I don't have the previous version thing so please tell me if there is any other solution ??? Thanks

    Reply

    • lakonst
      March 10, 2016 @ 6:09 pm

      @Jia: Your files got encrypted by TeslaCrypt 3.0 ransomware. Unfortunately there is not a way yet to decrypt your files

      Reply

  58. Servis Racunara
    February 28, 2016 @ 10:39 pm

    Thanks a lot.

    Reply

  59. Vaibhav Kalve
    February 2, 2016 @ 10:42 pm

    My computer was infected with virus in last month. I scanned whole computer with kaspersky antivirus I get nothing after that. After researching I found out that virus was self destructive and it eliminates itself after creating a damage to files. Most of the files are encrypted with virus and I am facing hard time to decrypt it back. All the files are encrypted with .LOL extension and I couldn’t find any legitimate software to decrypt that. Do you have any suggestion on this?

    Reply

  60. Iti
    October 22, 2015 @ 5:38 pm

    Hi,
    My Windows 7 dell inspiron is infected with a ransom virus. It has encrypted all my files in all the directories and the following 2 files are added to all the directories :
    HELP_DECRYPT.TXT, HELP_DECRYPT.PNG
    I have tried most of the file recovery softwares mentioned online, please advice if anybody knows how to decrypt my files and remove the this particular virus.

    Thanks !
    Iti

    Reply

  61. Anthony Hampton
    October 4, 2015 @ 1:03 pm

    Job done, I would like to thank you very much

    Reply

  62. Alan
    August 11, 2015 @ 12:19 am

    Hi

    My doc and picture files have all been encryped and the extension has been changed to .jpg.ezz Is there a tool to un decrypt these?

    Thx

    Reply

  63. Andy Watson
    June 30, 2015 @ 9:58 am

    HI,

    I have this crypto locker on my computer but i dont have the previous restore as I dont have the restore point. Do you know, how to get the files back as I already removed the virus from he computer. This kasper thing is of no help

    Reply

    • lakonst
      June 30, 2015 @ 5:12 pm

      @Andy Watson: :( The only way to restore files from cryptolocker, is by using a previous restore point.

      Reply

  64. Izabella
    June 26, 2015 @ 1:50 pm

    Hi! Do you know which virus encrypt with extension {name of file}.{extension}id-{10 random numbers}_request@inbox.com? And it is possible to decrypt this files?

    Thank you

    Reply

    • lakonst
      June 26, 2015 @ 4:58 pm

      @Izabella: Hi, I don't know about this virus.

      Reply

    • Tomek
      October 19, 2015 @ 2:35 pm

      Hi Izabella,
      have you found a solution to your problem?

      Reply

  65. Ignasi
    April 29, 2015 @ 11:01 pm

    Hello, I could clean my computer from CryptoLock using Norton Power Eraser (NPE), perfect.
    The thing is that I've tried to send an encripted file to ht**tps://www.decryptcryptolocker.com/ and they answer "Invalid File: The file does not seem to be infected by CryptoLocker. Please submit a CryptoLocker infected file.
    The virus was Cryptolocker, sure…and all the infected files has now this form:
    ..

    Could you help me, please?
    Best regards,
    Ignasi

    Reply

    • lakonst
      April 30, 2015 @ 7:30 am

      @Ignasi: There are many versions of Cryptolocker virus. Have you try to restore your files in previous version?

      Reply

  66. halus
    April 15, 2015 @ 1:15 pm

    no hope for this. just format and accept reality lol

    Reply

  67. drew
    March 14, 2015 @ 8:35 am

    This is the new generation of malware bill gates predicted. I have seen people pay ransom of 30$ only and receiving the unlocks,I believe one of these ransomware is 2048bit enc,so it's scary it's ruthless,but above all this,is bitcoin problem to,I mean they should be having accounts,wallets,disabled. It's sad the bitcoin community must now wear.
    I hope that you can get stabler removal apps,because clearly,some of them are not working.
    Goodluck troops.
    Xd

    Reply

  68. mauritz
    February 22, 2015 @ 11:54 pm

    Hello. I stupidly opened a zip file a month ago. i thought it was from a collegue. it was not and subsequently all my files (.doc .xls .jpeg .pdf) now have the following extention added after the usual file extention .tksxdzj. I did not receive any ransom request. However all my programs still work (office etc).
    Our IT guy removed the virus but the files are now unuseable. at the time i was running AVG (purchased, not free). I know it was my own fault, but can you help? Any suggestions welcome.
    kind regards
    mauritz

    Reply

    • lakonst
      February 23, 2015 @ 2:10 pm

      Try to restore your files to a previous version.

      Reply

  69. Concerned citizen
    November 18, 2014 @ 6:54 pm

    I installed one of the decrypter files you provided and it deleted the jpeg file!

    Reply

    • lakonst
      November 19, 2014 @ 12:21 pm

      The decrypter utilities are not provided from me and they are only recommended (here) for the specific problems.

      Reply

Leave a Reply

Your email address will not be published. Required fields are marked *