Important files came under attack by ransomware. They are encrypted.

Performing a google search I did find some decryption programs by companies like Kaspersky however those are dependent upon knowing the specific virus. It appears that for some of the viruses a list of the decryption keys has been compiled. Without knowing the virus we could try some of them however like with using brute force tactics the decryption attempts would likely fail. I agree that paying off the hijackers would be risky and possibly fruitless but I think I read an article once stating that according to the FBI users should pay up if the data is that important to them. However he has removed the program so that isn't possible. I agree that the system should be wiped and we consider this a lesson learned about backing up data especially if the information is important enough. If the OP's data is that important perhaps he should hire a security expert to work on the system because there is only so much we can do and almost nothing without knowing which virus he was hit with. Can we agree that there isn't really anything else that we can do? All I know to say is for him to figure out which virus he was hit with and google it or take his system to a specialist.

Hi
BleepingComputers has a dedicated RansonWare sub forum.
Ransomware Tech Support and Help Forum - BleepingComputer.com
I would suggest you post there,
DO NOT post any infected files, just provide them with the >>details<< from the AV logs.

Roy

Hi.
Until you determine what particular ransomware hit you, there's not much anyone can do. Some have had decryptors released, some are defeat-able by running a recovery program to grab the original deleted files. Still others, can be defeated by using Shadow Copy. Some have no resolution, and the best thing to do is save a copy of your encrypted data in the hopes that something breaks in the future (Yes, it does happen).
Just my 2-cents.

Thank you all for your offer of help. I have solved the issue by doing some research immediately after my last post yesterday. This method may or may not work for everyone, but if you have some files that are important that are encrypted, give what I did a try:

The way I did it was using a website to identify the ransomware (I used "https://id-ransomware.malwarehunterteam.com/identify.php").

Follow the sites instructions and if done correctly, it should be able to identify exactly what is that has encrypted you files (note that what is in the notepads or however the infection leaves its ransom (granted it does so) can be intentionally misleading.)

If there is a current known means of decrypting the files with said infection, the site should let you know of how to do so. This usually (if not, always) will be via a program. Follow the instructions of the site and of the installation procedure.

From this point onward, it may differ if you are not using "Rannohdecryptor" as was recommended by the website. Although, it may be similar. If so, keep following instructions below:

Make sure you have at least 45% of your :C (Hard Drive) empty. If the program is successful, it may not delete the encryted files, but rather make a duplicate of them that is decrypted.

After installing the program, click on "Scan" (or its equivalent). You will need to open both an encrypted file as well as a duplicate of said file that is not encrypted. (if you do not have a file(s) that has both an encrypted and non encrypted version, see the end of this post, after the dotted line.) It will identify if it is able to decrypt your files.

For the sake of the explanation, I will assume that the program says it is able to decrypt your files. If not, dont give up! If there is a will there is a way! Keep at it, doing research or what not. Do not give in to these cyber crooks. Waiting until there is a known way to decrypt your files IS an option, and there will be for all given enough time. (Sorry for going off topic) Allow it to do its thing (decrypt your files that is). This process is just like a typical virus scan; it checks every file and will take some time (in my case over two hours and it could take longer for you, so please be patient).

After it has completed, allow the program some extra (as I have learned) to finish its job. It will not say this, but I recommend it (I have a few left over video files that were not yet decrytped in a folder where some are).

Double to check to make sure the files are decrypted, and then celebrate.

Give the finger to the cyber criminals by spreading the message.

---------------------------------------------------------------------

A note for those that do not have duplicates of files. There is a chance that perhaps you may have an open document or simular that is still open. If so, save it (with the same as the crypted file, sans the "crypted" part of course). Another option is to look online for a video/music/game or other media that you can get redily online that you already had. For instance I had a Youtube video I made a few years ago that I forgot about. I had a copy of it on my computer that was downloaded then encrypted. I then redownloaded it; voila!

Another example is if you burned a dvd to your computer that became encrypted. Use the same software you used before (redownload it online if you need to) and burn it again. The same can of course be done with music CDs. You may even have an mp3 or other music player with some files.

what I am getting at, is give it some thought and you may have a duplicate file of something hanging around somewhere.

Agreed. In the case of ransomware the problem isn't over when the virus is removed. The OP had reportedly removed the ransomware already using his AV but that still left the files encrypted. It is a truly horrible virus to get because of the real possibility of losing data which is yet another reason why users should be taking good regular backups on an external drive that isn't usually connected to their pc. The developers seem to be really good with scare tactics as well.