Ransomware Attack

[anmolag19]

My laptop is attacked by a ransomware which is showing its name as cryptolocker bt id ransomware identified it as PClocker ransomware, how can i decrypt my files back??

Edited June 28, 2017 by anmolag19

[Aura]

Hi anmolag19

From the ransom note names on your desktop, I can see that you've been hit with a newer variant of PClock. Unfortunately, these variants cannot be decrypted for free at the moment. The best thing you can do is backup your encrypted files somewhere safe, and hope that a free decryption solution will be released in the future.

You can monitor the thread below for development regarding PClock and its variants.

https://www.bleepingcomputer.com/forums/t/561919/pclock-ransomware-support-and-help-topic/

[anmolag19]

Sir how can i backup all my data safely so that i can decrypt it later in future, what all files are required for the backup to decryption of the files later.

[Aura]

You can use CryptoSearch by demonslay335 to find all the files that have been encrypted on your computer, and copy them somewhere else (a USB Flash Drive, external hard drive, etc.).

https://www.bleepingcomputer.com/news/security/cryptosearch-finds-files-encrypted-by-ransomware-moves-them-to-new-location/

[anmolag19]

Ok thank you sir

[Aura]

No problem anmolag, you're welcome  

[Aura]

Glad we could help. :)If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks!