Jump to content

Recommended Posts

My friend got a PC LOCK ransomware, it encrypted some files and it looked like this one:

https://www.symantec.com/security_response/writeup.jsp?docid=2015-041313-2527-99&tabid=2

I've used Malwarebytes to remove this and other malware (~2000 entries).

After that I found Emsisoft decrypter but it doesn't detect PCLOCK and doesn't start so I can't restore the decrypted files.

 

How can I revert Malwarebytes scan and restore PC LOCK in order to start Emsisoft decrypter?

Link to post
Share on other sites

Alright. After running the fix below, a file called "DATE-TIME.zip" (where DATE and TIME are the date and time on which the FRST fix was ran) will be on your desktop. Upload it to the link below.

http://www.bleepingcomputer.com/submit-malware.php?channel=194

iO3R662.pngFarbar Recovery Scan Tool (FRST) - Fix mode
Follow the instructions below to execute a fix on your system using FRST, and provide the log in your next reply.

  • Download the attached fixlist.txt file, and save it on your Desktop (or wherever your FRST.exe/FRST64.exe executable is located);
  • Right-click on the FRST executable and select Spcusrh.pngRun as Administrator (for Windows Vista, 7, 8, 8.1 and 10 users);
  • Click on the Fix button;
    NYA5Cbr.png
  • On completion, a message will come up saying that the fix has been completed and it'll open a log in Notepad;
  • Copy and paste its content in your next reply;

fixlist.txt

Link to post
Share on other sites

it looks like it made this zip file:

https://drive.google.com/open?id=0BwTeHnZg8xyidDAwTEdEdW9GT1k

I've tried to sumbit it to the http://www.bleepingcomputer.com/submit-malware.php?channel=194

but I've got the message "The size of your file is greater than maximum file size of 10 MBs."

so I'm not shure if it uploaded

Edited by Eimulis
Link to post
Share on other sites

Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.