• All Community
    • All Community
    • Forums
    • Ideas
    • Blogs
Advanced

Not what you are looking for? Ask the experts!

This forum thread needs a solution.
Kudos0

How can I decrypt files after Bit Cryptor virus

Hello together,

yesterday, after I left my PC for a few minutes, I had a "new" Background on my Monitor "Your files have been encrypted   bit cryptor" and a Pop up window with a message to pay Money in a definite period of time to decrypt my files.

My Virus scanner removed this window from my Desktop (so I don't know how to pay for the key).

All files xls, doc, jpg are encrypted - and unfortunately my back up hard disk was connected and all files are also encrypted.

I read a lot of threads in the world wide web but nothing helps me - actually I am willing to pay for the key, but I have no idea how to do it.

I am really shocked because all files from many years are destroyed and the worst, all photos (children, Holiday, ...) from over ten years are encrypted!

Could anybody help me?

(sorry for my english - it is not my native language)

Thanks in advance!

Replies

Kudos0

Re: How can I decrypt files after Bit Cryptor virus

Hello SaKe71

Welcome to the Norton Community Forum

Sorry we had to meet under these circumstances. The only thing I can suggest to you is to visit one of the free malware removal sites. I'm not sure if they can help you with this or not. Please try one at a time and see if they can help you. Tell them what has happened. Here is the list of sites in this link.

Please see this link for an up to date description of these sites plus the addition of a newly listed site formed by one of our successful malware remover users. The new site is listed first in this link.

https://community.norton.com/en/forums/malware-removal-forum-recommendations

Please come back and let us know how you made out. Good Luck. Thanks.




 

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos1 Stats

Re: How can I decrypt files after Bit Cryptor virus

Install HitmanPro 3: http://www.surfright.nl/en/products/

Kudos1 Stats

Re: How can I decrypt files after Bit Cryptor virus

HI :-) SaKey71

I feel so very sad to hear of your situation. There is, as you say. all sorts of "info" on this insidious Ransomeware on the web, much of it conflicting as to the ability to remove the malware and the ability to restore your files. Be very cautious as to what you read and for sure try to get help only from the recommended malware removal sites. Much of what's written is by person's actually trying to sell you a software program that likely won't be of much, if any ,help in retrieving your files even if the malware can be removed.

Many respected sites say that restoration of files from this ransomeware is a very iffy situation, even if the malware is removed as the encryption is very strong and the malware has been said by some to erase your back up and shadow-copy files. Some say it may be possible to get back some of your files. Some sites warn against paying the ransom because there is no assurance you would actually get a key, though I would discount these reports because if that were so and word got out it would prove to be counterproductive to the profits of the bastards responsible for infecting your machine.

I hope you have some success in getting your files back.

I hate to say this using your experience as an example for a lesson, but because of Ransomeware, it is now a bad  idea to keep your sole backup solution drive connected to your PC, particularly while you are online. I suffer from "Crypto-whatever phobia" and never connect my external drives to my PC when online and avoid keeping them connected to my PC at any time. I keep my external drives disconnected and in a drawer and back up manually at the end of the day. (I backup to two separate external drives because last year I had an experience when an an external drive sold by a longtime respected name  failed after seven months-evidently the manufacturer of the external hardware was unknowingly using as the major component a  drive made by a major drive manufacturer that was later discovered to have a major defect that frequently lead to failures - there were many complaints on the external drive maker's forums and sadly the standard response was "Of course XXXXX will stand by our warranty and if it is still under warranty replace it-but data retrieval is your problem and expense."

I consider propagator's of Ransomeware to be the most insidious of cyber-criminals.

I am curious as to your statement about not knowing how to pay the Ransom. which of course is a personal decision for you. Is it because they ask for the ransom to be paid in Bitcoins and you don't know how to do that? Or are the propagators of this Ransomware so sick and evil that they are destroying people's valuable work files and personal memories just to satisfy a truly perverse mental need?

In any event my thoughts are with you and I sincerely hope you are able to get your files back/accessible again.

BTW: While it is possible that HitMan Pro may be able to detect and eliminate the malware causing your problem. I do not believe it will restore your files. I do not believe that HMP , unlike some other programs, keeps a journal of changes made to your PC by suspicious files. Also, I now would hesitate to use HMP to remove the malware even if it detects it. I have a copy of Hitman Pro installed on my machine, mainly for info. purposes (It scans very quickly and would tell me if I have malware or PUP that needs to be removed), but I would not use it again to remove malware. While it has for me quarantined part of an annoying PUP, it also totally borked my PC in trying to remove some other malware and luckily, after several attempts I was able to boot into a successful System Restore option.. This may have just been a coincidence/fluke because unknown to me a Windows Update had been installed on my PC and on restart both the HMP and Windows Update finalization were running at the same time. Many people have been using HMP for years without problems.

Kudos0

Re: How can I decrypt files after Bit Cryptor virus

Hey I know the BitCryptor virus is extremely prevalent this time of year, However; I was able to remove it from my computer using the steps listed in this 3-step guide 

https://virushelpcenter.com/remove-bitcryptor-virus/

Please let me know if anyone else if successful in removing this virus. The instructions are a little lengthy but it did the trick for me.

Hope this helps at least a few people,

Will

Kudos1 Stats

Re: How can I decrypt files after Bit Cryptor virus

Hello

The safest way is to use one of the recommended free malware removal sites. It is recommended not to try various fixes from the net.

Success always occurs in private and failure in full view. Windows 10 Pro 64 bit Norton Core Security Plus 22.17.3.50 Core Firmware 282 I E 11 Chrome latest version.
Kudos0

Re: How can I decrypt files after Bit Cryptor virus

I have a memory card that has a file of images blocked with CRYPTO BLOCKER. The files were never on the hard drive, only the memory card. Three computers I have put the memory card into register close to 900MB of data. This seems like too much data for the virus to have removed all the files from the card. Is there anyone who has had REAL success in decrypting these CRYPTO BLOCKER files?? Why is there so much data still reading on the card if the files are gone!?! Are there any memory card data recovery programs available? I am willing to pay a certain amount of money to someone who can demonstrate success in opening these files……….…..[Removed]…..Serious inquiries only please…  

[Admin Edit: Removing personally identifiable information to conform with the Participation Guidelines and Terms of Service]

This thread is closed from further comment. Please visit the forum to start a new thread.