Link to home
Start Free TrialLog in
Avatar of Nicola Siotto
Nicola SiottoFlag for United Arab Emirates

asked on

Corrupted files

One of my acquaintances has an issue with corrupted files. Most probably a virus sent through email that corrupted all files, such as MS Word (.docx), PDF, etc). Asked to send over the files to me and beyond the extension there is an additional one with .ccc (so it's for ex. XYZ.docx.ccc). Removed the .ccc extension but the files are unrecoverable even with a software made to fix corrupted files. Any suggestion? Thanks.
ASKER CERTIFIED SOLUTION
Avatar of David Atkin
David Atkin
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Even with weak encryption it will take an age to decipher.

With regards to the actual PC - Remove it from the network and re-install.
Some of these are so weak, that the key can be extracted in a few days. Cause the encryption implementation in those early versions is flawed.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Nicola Siotto

ASKER

I've requested that this question be deleted for the following reason:

Apparently there is no solution to recover the corrupted files.
You've been provided with the solution.  Recover from a backup.
I haven't been provided with a solution because they don't have a backup. They aren't IT literate and din't have a backup. So for me it's not a solution. The solution and only option for the solution for me would have been to be able to recover the corrupted files.
There is no solution to ransomware, not really.  The best solution is prevention.  So recover from backup, even if this user does not have one, is the best solution.  Have you read my article and tried uploading one file (with the offending extension) to one of the services to see if it is an encryption key that is a member of a C&C server that was brought down?
Dear SouthMod, I take your word for awarding points to someone who answers that there is no solution. I am not convinced about this way of doing things. Being a paying member it's not an issue to me to award points and I have a history to award points to over 100 users / questions, so for me it's just a matter of principle. People come come here to solve issues. If issues are not solved I don't see why there has to be an award. However if this is a sort of a policy it's not me who's going to change it but at this point I will keep the question unresolved for a longer period in case someone could hint for a solution.
Thomas Zucker-Scharff, sorry didn't confirm it to you earlier. I have downloaded the small detector exe scanner. It does not recognize the corrupted file in the folder therefore it simply skips it and act as there is no file to scan.
It didn't solve my problem. However apparently seems there's no solution.