Showing posts with label restore encrypted files. Show all posts
Showing posts with label restore encrypted files. Show all posts

Tuesday, October 20, 2015

How to Remove Crypt0L0cker Ransomware & Restore Encrypted Files?

I think my computer is infected by a ransomware and it is called Crypt0L0cker. All my personal files seem to be locked by this virus. How do I remove this ransom virus and recover my files without paying the ransom?

What is Crypt0L0cker?


Crypt0L0cker is a file-encrypting ransomware that may encrypt your important files on your computer, networking disks, or USB by using RSA-2048 key (AES CBC 256-bit encryption algorithm). The files that have been encrypted are usually photos, video, documents, etc. Here are some examples:

.sql, .mp4, .7z, .rar, .m4a, .wma, .avi, .wmv, .mpqge, .kdb, .db0, .dba, .rofl, .hkx, .bar, .upk, .das, .pptm, .pptx, .ppt, .xlk, .xlsb, .xlsm, .xlsx, .xls, .wps, .docm, .docx, .doc, .odb, .odc, .odm, .odp, .ods, .odt...

Tuesday, September 22, 2015

How to Get Rid of Win32/Crowti.A Ransomware from Your PC?

Hello. My computer appears to be infected with the Win32/Crowti virus and possibly other variations of it. Malwarebytes picked up nothing during a scan. Microsoft Security Essentials (MSE) removed it but on an infrequent basis it comes back and MSE will quarantine it prior to me removing it. Files on my computers desktop were corrupted (i.e. word, excel, PDF, etc.) and I have them saved in a single folder which I plan to discard. I also found 855 instances of Decrypt.txt and Decrypt.png files on my hard drive that I deleted. Computer seems to be running okay but I am not sold that the virus/malware is removed. Your help would be greatly appreciated. Thanks.

What is Win32/Crowti.A?


Win32/Crowti.A is a Ransomware that will encrypt personal or important files on your computer and then direct you to a webpage with instructions on how to unlock them. It can ask you to make a payment using bitcoins.

Win32/Crowti.A is usually downloaded when you open a spam emails or click on corrupted links. It can also be downloaded by some TrojanDownloaders. You should be very cautious when you surf the internet and remember to check the emails address before you open it.