Help ! System restoration/Virus

cyKer · 28 Jul 2016

Hi, basically, yesterday I faced a virus named "Ransomare Cerber" and it encrypted every file I had in my pc. It looks like there's no way to decrypt my files yet I was thinking about a solution. Basically, the virus deleted every restoration point i've had in my pc. I'm thinking about recovering my restoration points via different softwares and put it back in the "System volume" where they're stored.

You guys think it will work? If you know how to do it more specifically, i'd like to hear your way.

Thanks a lot.

ICIT2LOL · 28 Jul 2016

Hello and welcome cyKer mate I don't know of any softwares that will get rid of this crap and personally you would be better posting a thread in the sister 10 forum just join up like you did here - if you are running 10 as in your specs.

One that I would suggest you try is this - it does take a while to run but does so in a non Windows environment Kaspersky Rescue Disk 10

You will need to make a bootable disk and set the BIOS to boot from the optical drive (I prefer the disk to a stick personally)

cyKer · 28 Jul 2016

Thanks. Well, I don't want to find softawares to get rid of the virus, I think it's pretty much impossibile. Basically, I just want to recover the System restoration points and put them back in their original folder which would make me able to restore the windows to a previous version.

ICIT2LOL · 28 Jul 2016

Yes well if the system is riddled with that malware then how do you reckon it can sort the restore points out?? You need a system up and running to get restore points.

Have you tried safe mode yet??

For what it is worth it costs nothing to try the rescue disk and it is the best one in my mind of a few you can use.

AmericanPharaoh · 28 Jul 2016

Doesn't appear to be any know fix.
Cerber Ransomware Support and Help Topic - # DECRYPT MY FILES #.html/.txt/.vbs - Ransomware Tech Support and Help

The first thing Ransomware Cerber deletes are the Shadow Copies and Backups.

John

Layback Bear · 28 Jul 2016

If by chance you could find your restore points they would be encrypted; therefore useless.

ICIT2LOL · 28 Jul 2016

Yes mate as Layback and I have said already that malware affects everything and everything includes restore points.

Try the rescue disk you have nothing to lose.

cyKer · 28 Jul 2016

I'll wait to see if "trend micro : ransomware file decrypor" does something in the next day. (5h already) , and i'll try to rescue the disk.

torchwood · 28 Jul 2016

There are coming upto 1000 posts on BleepingComputers ransomeware Cerber page.
TrendMicro only recovered a small amount of Data.

This ransomware has not yet been successfully decrypted

Roy

AmericanPharaoh · 29 Jul 2016

torchwood said:

There are coming upto 1000 posts on BleepingComputers ransomeware Cerber page.
TrendMicro only recovered a small amount of Data.

This ransomware has not yet been successfully decrypted

Roy

Bleeping Computer, does a great job at repairing infected computers. I've been a member there for a decade. If there "Malware Team" can't come up with a fix for Ransomeware Cerber, then there is most likely not one. I'd recommend reinstalling Windows.

Just another reason to have your backups on an external drive.

John