[ebrahim.n65]

Hello Friends

My computer recently got a strange virus

Change the extension of all files (Word, Excel, Photoshop, etc.)

 

File extensions such as:

10.93.DOCX.kbuibxd

amar.XLSX.kbuibxd

khorasan.XLSM.kbuibxd

 

Note: Only files with uppercase extensions

 

Please help me because I have lost important files

 

Even after changing the file extension, the file is corrupted and can not be opened

Edited by Dakeyras, 11 February 2015 - 04:26 AM.
Removed posted email address for safety...

[Advertisements]

You have one of the ransomware viruses.  What it has done is encrypt all of your files and then add the garbage extension to each file as it is encrypted.  Unless you have backups they are history.  Example:

 

http://www.symantec....-061923-2824-99

 

We can help you remove the virus if it's still around and if you can get a FRST or OTL log but there is nothing anyone can do for your data files.  

 

Download OTL from

http://www.geekstogo...timers-list-it/

and Save it to your desktop.

 

Run OTL (Vista or Win 7 => right click and Run As Administrator)

 

select the All option in the Extra Registry group then Run Scan.

 

You should get two logs.  Please copy and paste both of them.

 

 

Please download Farbar Recovery Scan Tool and save it to your Desktop. 

 

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. 

 

•  

Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer. 

Press Scan button. 

It will produce a log called FRST.txt in the same directory the tool is run from.  

Please copy and paste log back here. 

The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply. 

 

[RKinner]

You have one of the ransomware viruses.  What it has done is encrypt all of your files and then add the garbage extension to each file as it is encrypted.  Unless you have backups they are history.  Example:

 

http://www.symantec....-061923-2824-99

 

We can help you remove the virus if it's still around and if you can get a FRST or OTL log but there is nothing anyone can do for your data files.  

 

Download OTL from

http://www.geekstogo...timers-list-it/

and Save it to your desktop.

 

Run OTL (Vista or Win 7 => right click and Run As Administrator)

 

select the All option in the Extra Registry group then Run Scan.

 

You should get two logs.  Please copy and paste both of them.

 

 

Please download Farbar Recovery Scan Tool and save it to your Desktop. 

 

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version. 

 

•  

Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer. 

Press Scan button. 

It will produce a log called FRST.txt in the same directory the tool is run from.  

Please copy and paste log back here. 

The first time the tool is run it generates another log (Addition.txt - also located in the same directory as FRST.exe/FRST64.exe). Please also paste that along with the FRST.txt into your reply.