Why does my desktop not have m picture but now says:

Lenovo ideapad 100-15ibd / 80qq
April 23, 2016 at 15:58:24
Specs: Windows10, Intel Core i3-5020U cpu @ 2.20 GHz / 8GB
!!!IMPORTANT INFORMATION!!!
ALL FILES ENCRYPTED WITH RSA-2048 AND AES-128 CIPHERS
MORE INFORMATION ABOUT RSA AND AES CAN BE FOUND HERE:
http://en.wikipedia.org/wiki/RSA_(c...
http://en.wikipedia.og/wiki/Advance...

Decrypting of your files is only possible with the private key and decrypt program, which is on our
secret server. To receive your private key, follow one of the links:
1.
2.
3.

If all of this addresses are not available, follow these steps:
1.Download and install Tor browser: www.torproject.org/download/download/download-easy.html
2. After successful installation, run the browser and wait for initialization
3. Type in the address bar:
4. Follow the instructions on the site.

!!! Your personal identification ID: !!!!

** have left out the ID# and the addresses on #'s 1,2, and 3 above so my files stay private if this is really the way to fix this issue, but im afraid to follow these instructions and make things worse. What should I do?**

PLEASE HELP ME!!!

message edited by dkmkatie


See More: Why does my desktop not have m picture but now says:

Report •

#1
April 23, 2016 at 17:11:56
Looks like you're infected with Locky Ransomware. If you could edit your post to provide as much information as possible as to what happened immediately preceding this, perhaps that would help.

LOTS of suggestions on a Google Search on how to remove this.

Maybe one of the Admins will move your post to the Security and Virus Forum.


Report •

#2
April 23, 2016 at 21:37:19
Seems your computer has got infected by Cryptolocker

it spread through email attachments, this ransomware has been seen targeting companies through phishing attacks.Cryptolocker will encrypt users’ files using asymmetric encryption, which requires both a public and private key.The public key is used to encrypt and verify data, while private key is used for decryption, each the inverse of the other. The bad news is decryption is impossible unless a user has the private key stored on the cybercriminals’ server.
Currently, infected users are instructed to pay $300 USD to receive this private key.
Infected users also have a time limit to send the payment. If this time elapses, the private key is destroyed, and your files may be lost forever.
Files targeted are those commonly found on most PCs today; a list of file extensions for targeted files include:3fr, accdb, ai, arw, bay, cdr, cer, cr2, crt, crw, dbf, dcr, der, dng, doc, docm, docx, dwg, dxf, dxg, eps, erf, indd, jpe, jpg, kdc, mdb, mdf, mef, mrw, nef, nrw, odb, odm, odp, ods, odt, orf, p12, p7b, p7c, pdd, pef, pem, pfx, ppt, pptm, pptx, psd, pst, ptx, r3d, raf, raw, rtf, rw2, rwl, srf, srw, wb2, wpd, wps, xlk, xls, xlsb, xlsm, xlsx

In some cases, it may be possible to recover previous versions of the encrypted files using System Restore or other recovery software used to obtain “shadow copies” of files

So Try to Boot the system in Safe Mode and Try system restore after that you can download and run Malwarebytes this might fix your problem.

You can download it from the below link
https://www.malwarebytes.org/dl-con...

Regards,
John Ryan | Tech Support
https://www.clouddesktoponline.com


Report •

#3
April 25, 2016 at 02:28:12
Had this on a colleagues machine a month or two ago, I tried to recover some of the files using suggestions i found online, nothing worked. The virus had also encrypted the restore partition which meant that i couldn't restore the machine. I had to reinstall windows from scratch.

If you do find a solution please do share.


Report •
Related Solutions


Ask Question