Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News Editorials & Other Articles General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search

gvstn

(2,805 posts)
3. Sorry, I haven't had time to look into this further.
Sun Nov 30, 2014, 11:26 AM
Nov 2014

Since there was no ransom notice and the names of the files including extensions have not changed that gives us no clues. The files do seem to be acting as if they have been encrypted. The RTF particularly. The question is why would a virus randomly encrypt files? I haven't found a thread with any solutions.

This Kaspersky tool is specific to getting encryption keys for files locked by specific known viruses but explains in the description how file names are usually changed thus identifying the virus. http://support.kaspersky.com/us/viruses/disinfection/8547 It won't work on a random infection.

This thread is where I have gotten it in my head that you may be victim to encryption even without ransom. You might read through it and see if your files act as described. http://www.symantec.com/connect/forums/some-virus-has-corrupted-many-our-microsoft-office-files-and-pdf-files

I'm going to do some more reading tomorrow on the original error message and see if I can find other possible causes or solutions. But first look doesn't seem too promising for an easy fix.

Recommendations

0 members have recommended this reply (displayed in chronological order):

I took a quick look around gvstn Nov 2014 #1
Thanks for the response (posted by Boomer using theHandpuppet's account) theHandpuppet Nov 2014 #2
Sorry, I haven't had time to look into this further. gvstn Nov 2014 #3
Thank you very much Boomer Nov 2014 #4
Found the virus responsible theHandpuppet Nov 2014 #5
Good work. gvstn Nov 2014 #6
It's not looking good Boomer Nov 2014 #7
It is a terrible situation. gvstn Nov 2014 #8
Thanks for the references Boomer Dec 2014 #9
Message auto-removed Name removed Aug 2015 #10
CTB Locker ransomeware khalidobiee Oct 2015 #11
Latest Discussions»Help & Search»Computer Help and Support»Computer virus corrupted ...»Reply #3