Link to home
Start Free TrialLog in
Avatar of Gladjag07
Gladjag07Flag for Canada

asked on

Filecoder attack / hacked

I have a laptop running W7 home premium that has been attacked by the Filecoder. all documents and photos have been hijacked. I ran Eset nod32 and it found 563 files cleaned 368, I also ran Hijackthis and malawarebytes.

The laptop is now clean but all those files are still locked out, is there a way to recuperate them?
is there a decryptor that can crack the hijacked files lock code?
or is there a process to try and get them back?

Last resort will be to advise that all those files are lost.
looking forward to a reply and some guidance

Thanks and regards
Avatar of Perarduaadastra
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
is there a decryptor that can crack the hijacked files lock code?


Without a bckup, you may be out of luck. Sorry.
Avatar of Gladjag07


Hi Perarduaadastra,
I was thinking of that also, I will try and run it hopefully they did not de-activate the restore feature on the laptop.

Hi Aadih,
that was exactly my first reaction, do you have a back up :-) and like a lot of people until they get hacked they don`t back up or have proper preotection.
On the other hand that is what keeps us busy and on our toes.
Avatar of Mohammed Hamada
This is the 3rd time I've seen and replied to a similar problem! This is a not a virus but a batch that encrypts all your files with a key and in order to decrypt it you will have to get the key.

your best bet is to pay to get back your files. and try to be more careful when dealing with unknown files.

Even if you have the means to decrypt the files which needs a super computer, it will need a lot of time and you may run out of time as I know this batch locks out those files forever as it deletes the original decrypting key.

I hope those guys who created this batch will get caught one day.