Virus your files are encrypted .vvv excel not work

Sawyer used Ask the Experts™
How to get back my files
A virus " your files are encrypted " and all excel files and word not working
What's is the solution for this

Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
EirmanChief Operations Manager
Your files have been strongly encrypted. Normally, this type of encryption can't be broken.
Unfortunately, the only proper way to get your files back is to restore them from your backups.
Then you should firstly consider wiping the infected PC(s) and restoring from a clean image.

If you have no backups and the files are really important, you could pay the ransom.
This is not to be recommended, as you would be dealing with criminals.
Sometimes, even this doesn't work ...  you will dealing individuals who have no conscience ..... they only want your money.

Be aware that this type of malware encrypts files throughout your network.
It keeps working until every data file, picture etc (including network backups) is encrypted.
If you want some links with advise as to how to avoid this in the future, please let me know.
Most Valuable Expert 2015
The solution is to first do a reinstallation of the OS on your PC, run all updates, install the software you need, add a good AV product, and then restore your files from a backup that hasn't been encrypted. Or if you have a newer full backup of your system which didn't have the ransomware virus installed yet, restore the system from that backup.

But NEVER EVER pay the ransom, that only encourages the criminals, and you can never be sure whether you will get the key to decrypt your files. If you don't have a good backup, your files are toast.

In the future, make sure that first, you never log on to your OS using an account with administrative rights. Always use your standard accounts. Whenever you need to run something as administrator, right click on the file and select "Run as Administrator", then enter your admin account and password.

Also make sure you only visit websites you trust, and never open email attachments from anyone, unless you are expecting an attachment from a known address. Also make regular backups to different media, and remove the media after the backup is finished.
EirmanChief Operations Manager

You might find some useful comments in this similar question which came in after your question.
Exec Consultant
Distinguished Expert 2018
Cryptowall (Crowti) ransomware v3 hit your machine, those files are already encrypted, no means worth to attempt to decrypt w/o the private crypto key which the ransomware will have deleted. The ransomware likely also makes Volume Shadow Copies useless or unusable. Do check if you have have any backup otherwise it is tough getting the original files back. Some scheme of recovery is stated in below - but quite a "lose lose" for victim.

There are file recovery tools to help but the chances are not high. The more you use your computer after the files are encrypted the more difficult it will be for file recovery programs to recover the deleted un-encrypted files. I do advise think twice and not pay ransom
Will paying the ransom actually decrypt your files? Yes, paying the ransom will allow you to download a decrypter that will decrypt your files. Once you pay the ransom and it is verified, a link will be made available where you can download the decrypter and your personal decryption key. You can then use the program to start decrypting your files. Please note that the decryption process can take quite a bit of time
Martin LissOlder than dirt
Most Valuable Expert 2017
Distinguished Expert 2018

This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial