How to de-crypt the files that encrypted by a ransomware attack

Question

1.00/5 (1 vote)

See more:

Hello & Good Day!

Most Respectfully i state that, On Saturday 30th November 2019, Some Cyber Criminals Made A Ransomware Attack on my Workstation Computer. All the files on my computer was Encrypted and an Additional Extension (.hets) was assigned to all the Files. And now i can not access even a single file on my computer.

After a comprehensive search on the web, i found some Decrypting Tools, but unfortunately they could not Decrypt my Encrypted Files.

I am a Software Engineer, and i have many Professional Projects Saved on my computer that all have become Encrypted, that is a Huge Reason to worry for me.

Can anyone make some help ?

I will be very Grateful for this Act of Kind.

Thanks & Regards

Solution Hall

What I have tried:

I Used some Decrytion Tools but they could not Decrypt my files

Posted 2-Dec-19 19:51pm

Solution Hall

Updated 3-Dec-19 5:50am

Add a Solution

3 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

OriginalGriff · Answer 1 · 2019-12-02T20:37:00

If the tools can't do it, then almost certainly, you are stuffed. Not all ransomware encrypts files: some of it just scrambles it because it's easier and it doesn;t matter to them, they just want your money. Under no circumstances pay them anything - some do and then have to pay again, and again, and again ... until they realize that the ransomers won't / can't decrypt.

Restore from your last backup (you do take regular, comprehensive, air-gapped backups don't you?) and hope you didn't lose too much.

Treat this as a learning exercise: don't do what you did to get it - visit "dodgy" sites, run unknown EXE's, whatever it was.
Sorry - but there is nothing we can do to help.

Patrice T · Answer 2 · 2019-12-02T20:50:00

Solution 2

Quote:
Can anyone make some help ?

Mostly impossible.
The are thousands of ransomwares and each can use a different encryption method, with a different key on each computer.
Your solutions are:
- format hhd and restore backups.
- wait until you find a decryption software matching the ransomware.
- pay the ransom in hope they will provide the decryption.

In any case, the first step would be to identify the ransomware.

Posted 2-Dec-19 20:50pm

Patrice T

Comments

CPallini 3-Dec-19 3:15am

5.

Patrice T 3-Dec-19 3:22am

Thank you

Richard MacCutchan 3-Dec-19 4:25am

You should never pay ransom, it just encourages criminals.

Patrice T 3-Dec-19 7:25am

I know and agree. That is why it is in third position.

Dave Kreskowiak · Answer 3 · 2019-12-03T05:50:00

Without knowing how the files were encrypted, which algorithms were used, and the keys and IV's used in the encryption process, it's going to be impossible for you to decrypt the files.

If you have backups of these projects somewhere, that's the only way you're going to recover them.

If you didn't have backups of these "professional projects", you're not being a professional.

How to de-crypt the files that encrypted by a ransomware attack

3 solutions

Solution 1

Solution 2

Solution 3

Add your solution here

Preview 0