after format

[shankly769]

Hello,as win7 has no more support,at the moment i dont have to upgrade,but im due to do a format as i had some kind of virus or dont know what hit hit my pc,as it is openning such websites alone,such pdf upgrade,to play tanks games etc.. etc... but safe sites not others,after such scans i still have this so im to decide to format,but the issue is that it dont have the usuall updates right?

what to do?

 

[samuria]

Realy you should have kept images of your system. All you can do is install sp1 and get what updates you can

 

[shankly769]

thanks Samuria,please explain more re sp1,as i noticed a nother problem as the scans seems solved the web pages issue,all setups and photos,etc have become all .kodc

dont know if understand what i say

 

[torchwood]

Hi Shankly

There are options availble here to get media updated

https://www.sevenforums.com/installation-setup/

choice of top 2 pinned items


Roy

 

[shankly769]

at the moment I'm still struggling to remove this .kodc malware

any more hints?

 

[RolandJS]

Do you have backups on external media of your stuff before this situation happened? If not, I will let others help out, because I have no answer concerning malware situations.

 

[samuria]

If you have malware delete all paritions during install and let windows create new ones that should kill it

 

[Bree]

at the moment I'm still struggling to remove this .kodc malware...

You may (or may not) be able to decrypt the .kodc files. Depends on how old your variant of the malware was.

Kodc is a malicious program, belonging to the Stop/Djvu ransomware family...
...There are currently two versions of Djvu ransomware infections: old and new. The old versions were designed to encrypt data by using a hard-coded "offline key" whenever the infected machine had no internet connection or the server was timing out/not responding. Therefore, some victims were able to decrypt data ... however, since the encryption mechanism has been slightly changed (hence the new version, released in August, 2019), the decrypter no longer works and it is not supported anymore. If your data has been encrypted by an older version, you might be able to restore it with the another tool developed by Emsisoft and Michael Gillespie. It supports a total of 148 Djvu's variants...

How to remove Kodc Ransomware - virus removal steps

 

[shankly769]

i think i have such a backup,but cant open any file not even a photo,at least web browsing is safe now,but if there others that can help ill apreciate

its been from yesterday

 

[shankly769]

I have drive c and drive e,
on drive e i have a backup but still cant see not even a photo due this kodc malware,
but if i format drive c and everything is ok,do the files on drive e become ok?

 

[RolandJS]

If drive E was online during the attack on drive C, then very likely, drive E was also attacked and is just as bad off as drive C.

 

[shankly769]

so if format takes place ,drive e extenstions wont be fixed?as malware has been removed

 

[shankly769]

so no one can have any idea how to remove this kodc?

 

[Bree]

so no one can have any idea how to remove this kodc?

All the files with the .kodc extension have been encrypted. The only way to open them is to decrypt them. That may not be possible if it was a recent version of the malware. There were some decrypting tips for earlier version of kodc in the link I gave earlier.


How to remove Kodc Ransomware - virus removal steps

 

[shankly769]

restore option didnt worked,i had to fresh install win 10 now bit the drive e still has these extensions and wont open,

 

[Bree]

restore option didnt worked,i had to fresh install win 10 now bit the drive e still has these extensions and wont open,

The malware has encrypted all those files and added its extension. You'll never be able to open them until they have been decrypted (if that's even possible).

 

[shankly769]

how can i decrypt these files please?????

 

[Barman58]

Bree has already given you the instructions that are available, Twice, These may work if the malware was an old version, if it was a newer version the decrypt instructions will not work and it's likely that your files are not recoverable

 

[TechnoMage2016]

Long, years, before Ransomware ever reared it's ugly head, we had some pretty nasty viruses.
Heck, we even had them back in the 80's, when DOS was the default OS. And we removed them with an anti-virus program on a 3.5" Floppy Disk.

Since then, how many thousands of times have we posted to "backup your HD", or at least your personal stuff, to some external media that a virus can't reach. And don't just do it once and then forget it....like so many do. To be any good, a backup must be as recent as the last data files you saved to your HD.

Practicing what I preach, I backup all my data files almost daily, and my C: drive weekly, and I clone my entire SSD drive every two weeks, to a 1TB internal drive, that is only connected to the motherboard during the clone process, and then it's disconnected for safety. The worse virus ever, cannot infect a drive that is not connected to the motherboard.

So, if something bad happens on my C: partition on my main SSD, I have data backups, C: partition backups and even whole SSD clones.

I do sympathize with someone who has lost everything, because I see it often, but when it's GONE, it's GONE and there ain't a dang thing I, or anyone, can do about it.

Sorry, I just had to get that off my chest.

TM

 

[RolandJS]

In theory, if ransomware exists anywhere on a computer, if it kicks in during a backup, then both the source and target HDs are vulnerable. That's why several sources suggested having "air space" between 2 or more backup HDs.