I don't know if it's the right place to ask my question, if not I am sorry. I recently found all my files encrypted and I don't know what to do about it. I did notice .Lkfr extension in my files. All encrypted files got this extension and I am pretty sure none of my files had this extension before. Also, i found _readme.txt file in my system and it's asking me to pay $980 to decrypt my files. I did some Google search and found out my computer is infected with a Ransomware virus. There were several guides providing help with removing this virus and restoring my files. I am no tech-savvy, still, I tried to follow the instructions provided by one of the guides (here's the link to be exact). The guide mostly focused on removing the threat. Now i am not sure if the virus is really gone from my system or not. But my files are still encrypted. Is there any way to decrypt my files without paying the ransom??? I don't want to lose my files but i also can't afford to pay the ransom. What should i do?
Hello @clintmacoy
Welcome to Norton Community
`````````````````````````````````````````````````````````
[...]
Can I recover my files encrypted by LKFR without paying ransom?
Unfortunately, the robust encryption used by LKFR makes direct decryption of files difficult currently. Your best options are restoring files from backups unaffected by the attack or waiting for free decryption tools in the future.
[...]
This malware removal guide may appear overwhelming due to the number of steps and numerous programs that are being used. We have only written it this way to provide clear, detailed, and easy-to-understand instructions that anyone can use to remove malware for free.
Please perform all the steps in the correct order. If you have any questions or doubts at any point, stop and ask for our assistance.
LKFR Ransomware Virus: How It Works & What To Do If Infected
https://malwaretips.com/blogs/lkfr-ransomware-virus/ 19-Feb-2024
``````````````````````````````````````````````````
LIST OF STOP DJVU Extensions: Updated: 02/19/24
Any files that are encrypted with newer STOP (Djvu)Ransomware variants after August 2019 will have the .gero, .hese, .karl, .nesa, [...] .ldhy, .lkhy, .lkfr, extension appended to the end of the encrypted data filename.
https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-djvu-puma-promo-support-topic/
``````````````````````````````````````````````````````````
Ransomware is a form of malware designed to encrypt files on a device, rendering any files and the systems that rely on them unusable. Malicious actors then demand ransom in exchange for decryption. StopRansomware.gov is the U.S. Government's official one-stop location for resources to tackle ransomware more effectively.
https://www.cisa.gov/stopransomware
````````````````````````````````````````````````````
fwiw ~ were my machine. I'd ask for help here and I'd trust their guidance. Just me.
- Malwarebytes Malware Removal Help Forums
https://forums.malwarebytes.com/forum/108-malware-removal-help/