Jump to content

I have been attacked, changed all my saved files to some type of encryption with a “.bb37”


mjs222

Recommended Posts

I installed Malwarebytes Anti-Ransomware Beta after I was attacked by a ransomware. It changed all my saved files to some type of encryption with .bb37. I was hoping Malwarebytes Anti-Ransomware Beta would be able to not only protect from ransomware, but decrypt the files with this .bb37. Do you know what I can do to recover these file?

Link to post
Share on other sites

Hello mjs222 and :welcome:

1.)  To the best of your ability, please estimate the local time and date when the ransomware attack occurred and please confirm that the ransomware attack did occur before after MBARW Beta8 was installed.  Please include in your reply if Malwarebytes Anti-Malware (MBAM) Premium and/or Malwarebytes Anti-Exploit (MBAE) was installed before the time of the attack.

2.)  Using the native Windows built-in zip utility, please create the following, separate, .zip (not .7z or .rar) archive file for MBARW developer team analysis:

                                                                 "%ProgramData%\MalwarebytesARW"

3.)  Please choose one of the files that have been encrypted and, similar to step #2 above, separately archive the file into a .zip container.

Please attach the 2 .zip archives to your next reply.  Thank you for your beta testing contribution to the Malwarebytes Anti-Ransomware (MBARW Beta) project and your valued feedback.

Edited by 1PW
Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.