Jump to content

Is not there a solution to unlock files after encrypted ?


Recommended Posts

Hello 

Is not there a solution to unlock files after being encrypted  ? 

Ransom  UYJH     I see the ransom does not affect on the window's system rather it encrypts folders and documents so that either to steal the documents form one's computer or to bargain the owner of that computer by paying large amount of money.  I tested my computer after the attack 3 days ago by many programs of antimalware , anti-ransom , antivirus , and etc..  The disk hard C is clear and no threat could found.  Furthermore, I can say  " The ransom cannot cause further damage in future or any risk, because it gets its goal and that's so " 

The matter is not the virus, but to unlock the files 

I tried to use a recovery using a good recovery program and at once worked but the output all are encrypted files, so no reason to be one at hope. 

I appeal the good software companies in the world to get us a solution and protect our issue 

I am not a merchant nor a man of politics. I am just a teacher voluntary teaching my students online free or any student \ people join my group on Facebook and that's all my aim. 

please help : My files all went away and cannot be resumed as I see or I am got sure 

I in every day upload my files and my lectures free to people, so why this devilish act which bleeds the forehead  ??? 

I want people reply and help. I appeal the humanity everywhere. I appeal good people. I appeal all world. I appeal the Malwarebytes company. 

Please help

please help 

ATTENTION!

Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-FglTTmgzZT
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.


To get this software you need write on our e-mail:
support@sysmail.ch

Reserve e-mail address to contact us:
supportsys@airmail.cc

Your personal ID:
0443tOjkfdunc61XzcIVH2MwSmfxoT77WcnFsk8AZIcdjqwdr2

11.PNG

Link to post
Share on other sites

1 minute ago, David H. Lipman said:

This ransomware is not a virus.  It is a trojan.

Please reference:  https://blog.emsisoft.com/en/34375/emsisoft-releases-new-decryptor-for-stop-djvu-ransomware/

I used this software and installed as well as many anti-ransom programs else and i got no advantage.  Yes, if the attack is offline it can be useful but when it is online the options are very limited    ??   None of all these programs is useful and I tried all 

Many things I did at least I secured my PC ..  I want to recover my files and unlock the code   so how , how ???  

Link to post
Share on other sites

2 minutes ago, MohammadRRR said:

I want to recover my files and unlock the code   so how , how ???  

I doubt you will be able to.

The following site is your best bet for advice.

Ransomware Help & Tech Support at Bleeping Computer
https://www.bleepingcomputer.com/forums/f/239/ransomware-help-tech-support/

Thank you

Link to post
Share on other sites

37 minutes ago, David H. Lipman said:

If the Emsisoft Decryption tool was unable to decrypt your files than the only recourse is to restore them from a backup.  If you did not make a backup, then you are out of luck.

Sorry about that  :-(

Good point to negotiate 

Thank you  I previously before the attack 4 days ago used windows 7  since then I formatted the computer and changed to 10 

  Can I use now the backup in windows 10 ? 

 I tried using ( one good program of file recovery ) but all the output files are encrypted as well, so I can't believe they come back again.   

Link to post
Share on other sites

  • Root Admin

If you restore a file system from a previous backup that was infected you will simply infect the new computer.

You have a couple of choices.

Remove the old hard drive and store it away in the hopes that sometime in the future a key is released to decrypt the data, or...

Image the drives as a single file backup using a tool like Macrium Reflect and save that file on an external drive for future use if a key is released in the future.

Aside from that the best thing to do at this point is to format the drive, and reinstall Windows clean. Then make sure you do invest in some type of backup for the future and take this as a learning lesson.

 

Backup Software
https://forums.malwarebytes.org/index.php?/topic/136226-backup-software

 

Greg Carmack - MVP 2010-2020 -Clean Install Windows 10
https://answers.microsoft.com/en-us/windows/forum/windows_10-windows_install/clean-install-windows-10/1c426bdf-79b1-4d42-be93-17378d93e587

How to Create a Local Account While Setting Up Windows 10
https://www.howtogeek.com/442792/how-to-create-a-local-account-while-setting-up-windows-10/

 

 

The information below is for use on a future NEW install of Windows to help you keep it clean

 

  1. Recommend using a Password Manager for all websites, etc. that require a password. Never use the same password on more than one site.
    https://www.howtogeek.com/240255/password-managers-compared-lastpass-vs-keepass-vs-dashlane-vs-1password/
  2. Make sure you're backing up your files https://forums.malwarebytes.com/topic/136226-backup-software/
  3. Keep all software up to date - PatchMyPC - https://patchmypc.com/home-updater#download
  4. Keep your Operating System up to date and current at all times - https://support.microsoft.com/en-us/windows/windows-update-faq-8a903416-6f45-0718-f5c7-375e92dddeb2
  5. Further tips to help protect your computer data and improve your privacy: https://forums.malwarebytes.com/topic/258363-tips-to-help-protect-from-infection/ 
  6. Please consider installing the following Content Blockers for your Web browsers if you haven't done so already. This will help improve overall security

Malwarebytes Browser Guard

uBlock Origin

 

Further reading if you like to keep up on the malware threat scene: Malwarebytes Blog  https://blog.malwarebytes.com/

Hopefully, we've been able to assist you with correcting your system issues.

Thank you

 

 

Link to post
Share on other sites

Stellar data recovery makes shortcut of UYJH ? 

Hello 

After my PC  was attacked by the ransom virus ( UYJH ), I tried to recover my files using ( Stellar Data recovery )

I noticed a small square beside the opening recovery working screen.  I didn't know what it is first!

I refreshed my pc many times thinking that the stellar program did it .. 

After I completed the process and saved my files to an external hard disk, I tried to delete that unusual shortcut.

Now its name is clearly appeared to me; it is the virus ( UYJH )   >>> written over 

Hmmm!  it comes again by the stellar recovery. I got it ! 

I immediately deleted it and I noticed by my naked eyes how it ran away.

Good work of you the attacker! Damn to you until the Doomsday!

The computer gave  me another option to look at the virus location and from there to delete , but I gathered myself not to follow.

What it does , the virus ?  It changed all data opened in the stellar program into shortcuts. ( writes over) 

No problem, the data was saved before its last action 

I closed the program and restarted my PC then after opening the hidden, I opened it using the safe mode  

I checked registry carefully to look for the ransom virus ( UYJH). I found there and I deleted. 

Another thing to mention ; after I formatted my PC and changed from windows 7 to 10, I never installed a Mozilla browse.

However, I every time look inside the registry I notice the Mozilla and though I delete it comes back another time ! 

I really think that the ransom attacked my computer through the Mozilla browser or it has a close relation with the virus!  

 

It is very strange 

Link to post
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
Back to top
×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.