0

Is there any way to decrypt the data which is affected and encrypted by locky ransomeware hackers. one of our companies system (windows 7) is affected. i have Ubuntu installed on my PC. please help anyone , if there is any war for the recovery.

Thanks.

user611567
  • 1

2 Answers2

0

Restore your PC to a previous version using System Restore

Or have a go at Kaspersky's (Kasperskies?!) decrypt tool, I have seen success with this on various cryptolockers (not sure about LOCKY though).

https://noransom.kaspersky.com

Might as well give it a blast, eh?

Bitten Fleax
  • 650
  • 4
  • 14
  • This doesn't appear to decrypt user files, if I read the link correctly. – fixer1234 Jun 29 '16 at 09:35
  • "Kaspersky WindowsUnlocker does not perform any actions with files (in order to disinfect files you can use Kaspersky Rescue Disk).". How does this tool help the author beyond clearing out the malware which is the least of their problems ( it also wasn't the problem they are looking to solve ) – Ramhound Jun 29 '16 at 11:27
  • WindowsUnlocker is a different thing from Kaspersky Decryptor. https://noransom.kaspersky.com – Overmind Jun 29 '16 at 11:33
  • @Overmind Oh yeah my bad sorry. Was just a quick answer. I edited it. – Bitten Fleax Jun 30 '16 at 10:46
-1

Most ransomware encryption systems disable restore capabilities, including VS, System Restore.

A chance to recover your files is the determine exactly what version of encryption ransomware it is and see if theres a program written to decrypt it. Some ransomware encryption is supported even by large AV companies like Kaspersky Lab Decryptors.

Some of them though, were not reversible and therefore you will not be able to decrypt the files encrypted by them.

Overmind
  • 9,924
  • 4
  • 25
  • 38