Attacked by ransom-ware Hades locker

[gdieltje]

I have been attacked by ransomware that redirects me to a website with the title Hades locker

All data files on the computer have an added extension  

original:

 kapelstraat 20.pdf

now:

kapelstraat 20.pdf.-HLKEQGK

I found it seems to be an update of wildfire ransomware.

There are readme files that open at PC reboot in the browser and on notepad that schow the same message.

How can I get rid of this?

My backups are too old. I was counting on bittorrent-sync as backup but it failed in its job.

[AdvancedSetup]

Hello @gdieltje and

Unfortunately, there is no way aside from paying to get your files back at this time. You can set the hard drive aside in hopes that at some time in the future it is possible, but currently not available.

http://www.bleepingcomputer.com/news/security/wildfire-rises-from-the-grave-as-the-rebranded-hades-locker/

http://www.bleepingcomputer.com/forums/t/628692/hades-locker-help-support-topic/

It is possible to clean up the computer but my own personal recommendation would be to FDISK, FORMAT, and reinstall Windows. If you'd rather look at cleaning it up (not my recommendation) then let me know and we can scan and clean up the computer.

Thank you

Ron

 

[gdieltje]

Of course it is not an option to pay a ransom. We don't deal with criminals!

Thank you for the advise.

[AdvancedSetup]

Since this issue is resolved I will close the thread to prevent others from posting here. If you need assistance please start your own topic and someone will be happy to assist you.