Your files have been encrypted. In their current state, their use by you is impossible.

You clicked on a link you shouldn’t have, opened an attachment you shouldn’t have, your computer is not protected by serious protection software (anti-virus), you became the target of a selected attack for some reason…

Something like that or something similar.

First, contact us to investigate which strain infected you. You will need to send us 2-3 encrypted files and the ransom note (if you have it) for analysis.

Then, we will check through No More Ransom to see if there is a confirmed solution for this strain, and if there is, we will proceed with decrypting your data (FREE).
If there is no solution, we will advise you accordingly.

Northwind Data Recovery has developed methods through which we can recover data, under certain conditions, even if the decryption key is not known and there is no complete solution. See more here.

We understand that in many cases, the data is very important and must be recovered at all costs. However, if you have the option, the answer to the question is categorically NO. The reason is that by paying the ransom, you essentially perpetuate the situation, and the criminals see their illegal activity flourish.

Additionally, no one can assure you that even if you pay the ransom, the criminals will keep their word and deliver the decryption key. Remember that you are dealing with people who are wanted by the FBI, and in many countries (including the USA and the UK), negotiating with them is prohibited by law.

Likewise, we have encountered cases where the victim decided to pay the ransom, but the criminals then demanded more money to release the decryption key, or the software they sent for decryption was faulty and did not work properly or did not work at all.

These are everyday occurrences, and you should think very seriously before negotiating with these groups of individuals.

Do not trust companies that appear as ‘intermediaries’ and promise ‘negotiations for a lower amount’. What they essentially do is communicate with the criminals and mediate for their commission.

And of course, do not trust companies that claim they can decrypt your data, while we say that decryption is impossible. They will ask you for money ‘to break the algorithm’ (or something equally eloquent) and you will not get your data back.

You should apply basic security principles in your daily routine. We have compiled a guide several years ago, which is still relevant. You can find it here.

We strongly recommend following the basic self-training instructions from the No More Ransom website, in order to protect yourself, your work, and your personal data by easily recognizing a scam that may come your way (for example, in an email or on a website).

Of course. Attacks are more likely to target businesses since their data is usually critical for continued operations, but a deceptive email is enough for an individual to become a victim as well.

According to our statistics, 22.5% of those who sought our help in cases of encryption by Ransomware were individuals.