Hello Sourabh,
We regret the inconvenience caused. The type of attack you have suffered is called a "crypolocker". It is malware, but not a virus ,generally it means that you have been tricked into running a program which then encrypted your files. This type of attack has been widespread for about 2-3 years now. However, new variants appear all the time. Our software blocks many of them but unfortunately you got what is called a "zero day" vulnerability – in other words, you were infected by a very new form of the malware before it had been reported to us and so before we could add its signature to our database and block it. When AVG detects the malware, it will remove it from your PC, but this will not de-crypt your files. If you have backup copies, you should use them. If you do not have backups, please start keeping multiple backups – this is essential for all types of computer.
Hi All,
Recently my Surface pro ws infected with a ransomware which has encrypted all my files with .CERBER extension. Also since my PC was not starting I had to do a factory reset and have installed Windows 10 again. Following are the issues I am facing.
1. No previous file version exist for infected files so I am not able to use shadow software as some site suggested.
2. My One drive was also infected and all my files in it are also infected. How to retrive them?
Please suggest how decrypt the files.
Hello Sourabh,
We regret the inconvenience caused. The type of attack you have suffered is called a "crypolocker". It is malware, but not a virus ,generally it means that you have been tricked into running a program which then encrypted your files. This type of attack has been widespread for about 2-3 years now. However, new variants appear all the time. Our software blocks many of them but unfortunately you got what is called a "zero day" vulnerability – in other words, you were infected by a very new form of the malware before it had been reported to us and so before we could add its signature to our database and block it. When AVG detects the malware, it will remove it from your PC, but this will not de-crypt your files. If you have backup copies, you should use them. If you do not have backups, please start keeping multiple backups – this is essential for all types of computer.
Although these are not official AVG recommendations, the following articles may help you to recover earlier copies of your files:
http://www.pcworld.com/article/2084002/how-to-rescue-your-pc-from-ransomware.html
http://www.computerworld.com/article/2485214/microsoft-windows/cryptolocker-how-to-avoid-getting-infected-and-what-to-do-if-you-are.html?page=3 .Thank you.