Avatar of Gladjag07
Gladjag07
Flag for Canada asked on

Filecoder attack / hacked

Hello,
I have a laptop running W7 home premium that has been attacked by the Filecoder. all documents and photos have been hijacked. I ran Eset nod32 and it found 563 files cleaned 368, I also ran Hijackthis and malawarebytes.

The laptop is now clean but all those files are still locked out, is there a way to recuperate them?
is there a decryptor that can crack the hijacked files lock code?
or is there a process to try and get them back?

Last resort will be to advise that all those files are lost.
looking forward to a reply and some guidance

Thanks and regards
Anti-SpywareAnti-Virus Apps

Avatar of undefined
Last Comment
Mohammed Hamada

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Perarduaadastra

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
aadih

is there a decryptor that can crack the hijacked files lock code?

No.

Without a bckup, you may be out of luck. Sorry.
Gladjag07

ASKER
Hi Perarduaadastra,
I was thinking of that also, I will try and run it hopefully they did not de-activate the restore feature on the laptop.

Hi Aadih,
that was exactly my first reaction, do you have a back up :-) and like a lot of people until they get hacked they don`t back up or have proper preotection.
On the other hand that is what keeps us busy and on our toes.
Mohammed Hamada

This is the 3rd time I've seen and replied to a similar problem! This is a not a virus but a batch that encrypts all your files with a key and in order to decrypt it you will have to get the key.

your best bet is to pay to get back your files. and try to be more careful when dealing with unknown files.

Even if you have the means to decrypt the files which needs a super computer, it will need a lot of time and you may run out of time as I know this batch locks out those files forever as it deletes the original decrypting key.

I hope those guys who created this batch will get caught one day.
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23