Jump to content


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.


Files encrypted on Mom's computer

  • Please log in to reply
1 reply to this topic

#1 JommerJoy


  • Members
  • 1 posts
  • Local time:07:29 PM

Posted 26 January 2015 - 06:58 PM



I am looking for a solution for my Mom.  Her computer was infected with a virus, which appeared yesterday. Her husband uses the computer for work and we are not sure whether he went to a site or received an email that had the virus.  It purports to be the CrypoLocker virus.  Her virus protection did not detect the virus during a scan yesterday but it is clearly there.  Each file has a .PNG ending on it and none can be opened.  I notice a lot of HELPDECRYPT.PNG files on her computer.  I have tried to restore to an earlier point but, of course as I suspected, it did not fix the problem.  I am looking for some information before I go to see her tomorrow.  Is there anything I can do to unlock the files short of a full factory reset?  Will a factory reset even remove the virus?  Any advice would be appreciated.


Mom's computer has Windows 7 as the OS. She uses IE for a browser.  She doesn't have much on the hard drive but I would like to salvage the fiels if I can. We can delete them if necessary as they are not crucial.


BC AdBot (Login to Remove)


#2 quietman7


    Bleepin' Janitor

  • Global Moderator
  • 51,953 posts
  • Gender:Male
  • Location:Virginia, USA
  • Local time:07:29 PM

Posted 26 January 2015 - 11:08 PM

Does it look like one of these or something else...?
* PClock
* TorrentLocker
* CTB-Locker
* KEYHolder
* CryptoWall

If the ransomware does not look like any of those in the above links...reading through the following information may assist with identifying the crypto malware infection you are dealing with.Once you have identified which particular ransomware you are dealing with, we can direct you to the appropriate discussion topic for further assistance.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users