this ransomware encrypts your private
files video photos documents
the infected file's name will end by
specific this new extension
so you can't obtain access to them at
all
this method will show you how to remove
this virus manually
then you have to isolate your encrypted
files in external storage to protect
them from another encryption
first start windows in safe mode
press window button and r
then type ms config
new window will open
select boot tab
then go down to boot options and check
the safe boot box
press apply then ok window will now
start in safe mode
to show hidden files
press window button nd to open windows
explorer
select view tab
then options
change folder and search option
select view tab from folder option
window
then go down and select show hidden
files folders and drives
then clear the check box from hide
extensions for known file types
and clear the check box next to hide
protected operating system files
warning box will shown
press yes
then go to folder option window and
press ok
press window button nd to open windows
explorer
find the path as you see
when you find hosts file
create a new text file on your desktop
then double-click to open it
now drag hosts file to this window
find these eyepiece and delete them
now close the text file and press save
if you find the hosts file is empty we
recommend you to watch how to fix hosts
file video
delete some files that run with windows
start
press window button nd to open windows
explorer
located in the startup folder
go to your user profile or default
profile
and find some files added by the
ransomware
then delete them all
now go to system id folder and find the
message that put in by the criminals to
know your encryption status online or
offline
if ends with t1 then your encryption is
offline and can be solved
if not so then your encryption is online
to delete all temp files
press window button and r
then type percent temp percent
select all files then delete
to start windows normally press window
button and r
then type ms config
new window will open
select boot tab
then go down to boot options and uncheck
the safe boot box
press apply then ok
window will now start in normal mode
after windows start
you need to download any free antivirus
to protect your data from malware and
fully scan your pc and for possible free
solutions if you had an offline id
download mz soft decrypt tool and if the
needed key is loaded into mz soft
servers you will get all your files back
again
and if you had an online id we recommend
you to try some recovery methods
photorec is a free file data recovery
software designed to recover lost files
including video documents and archives
from hard disks cd-roms and lost
pictures from digital camera memory
hetman partition recovery for fast and
secure recovery of data after partition
formatting or removal
the program is intended for recovering
data from hard drives memory cards usb
flash disks
rikuva can recover pictures music
documents videos emails or any other
file type you've lost
and it can recover from any rewriteable
media you have
memory cards external hard drives usb
sticks and more
mini tool free data recovery software
can deep scan hard drives memory cards
ssds etc on windows compatible devices
and recover data lost by human errors
and system crashes
it supports 100-plus types of files
including photos videos audios documents
and more
if you have any question you can find
some links in this video description can
answer all your questions