Anti-Virus Apps
Anti-Virus Apps

Cerber Ransomware demand - any change of getting around this one without paying?

Any way around it?
Pls see pic

feck1Asked: 2017-03-16

Who is Participating?

Experts Exchange Solution brought to you by

Enjoy your complimentary solution view.

Get this solution by purchasing an Individual license! Start your 7-day free trial.

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

LVL 111

JohnBusiness Consultant (Owner)Commented: 2017-03-16

any chance of getting around this one without paying? <-- Restore from backups is the only other way.

Few of us in here recommend paying and the odds are less than 50:50 that you will get your data back.

LVL 99

Lee W, MVPTechnology and Business Process AdvisorCommented: 2017-03-16

You can easily get around this. Restore your backups.

Otherwise, you can support terrorism and send terrorists money to unlock your files... I wouldn't - I don't like the idea that I'm giving money to people who kill and terrorize others... but if you can sleep at night, whatever works for you.

LVL 99

Lee W, MVPTechnology and Business Process AdvisorCommented: 2017-03-16

And you can try this:
https://success.trendmicro.com/solution/1114221-downloading-and-using-the-trend-micro-ransomware-file-decryptor

LVL 27

John TsioumprisSoftware & Systems EngineerCommented: 2017-03-16

It seems that Kaspersky has a decryptor for Cerber ransomware but it must match the version

LVL 24

RaminTechnical AdvisorCommented: 2017-03-16

Unfortunately, it is almost impossible to decrypt the files locked by Cerber ransomware, and deleting the virus from your computer will not help to eliminate the cypher from the files. Trying to recover your files using hacker-suggested Cyber decryptor tool is not safe either. The best decision is to turn to some more reliable ways to recover your data as John mentioned above.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial

LVL 69

btanExec ConsultantCommented: 2017-03-16

If you have the sample you can try out ID Ransomware (https://id-ransomware.malwarehunterteam.com/) to confirm the variant and if decryptor is available . Cerber v1 is possible to decrypt and there is a tool (Trendmicro) https://success.trendmicro.com/solution/1114221-downloading-and-using-the-trend-micro-ransomware-file-decryptor#collapseFour
otherwise chances are close to zero. Do backup your files before trying too.

I have compiled a list of decryptor in Annex and also share possible means to recover under FAQ#4 @ https://www.experts-exchange.com/articles/28059/TL-DR-Ransomware-Infected.html

feck1Author Commented: 2017-03-16

Odds of success without paying ?

LVL 111

JohnBusiness Consultant (Owner)Commented: 2017-03-16

< 1 percent

LVL 69

btanExec ConsultantCommented: 2017-03-16

cant go any lower, please do not put your bet in it. If you have the backup, go with that. Sure recovery is not even close to always certain when you are dealing with these fraudster. The tool even if given may not be working after paying and such state is real and can happen again to all