Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Help me with this new PClock (Updated) ransomware


  • This topic is locked This topic is locked
4 replies to this topic

#1 Agent_KS

Agent_KS

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:01:08 PM

Posted 23 December 2016 - 12:48 AM

I need Help!! I am a student studying on loans and my system got hit with the ransomware calling itself cryptolocker but when I tried to ID it using the ransomware ID site, it came up as PClock (updated). All my research papers are on my system and currently encrypted. There is no file extensions or change in name of the original file. I just cant access the files. It says broken, corrupted etc. Also txt files named 'your files are locked !.txt' have popped up in some drives. All my files are locked except a few video files which for some reason aren't locked.  I am already a student with a 5 year drop and In another three months was supposed to be graduating. Now I don't know what to do, since half my research and port folios etc are on my system. Unless someone can help decrypt my files, I am over. So please tell me there's a fix. Also if its any help this malware came as a windows update pop up with legit looking license. I was stupid and foolish enough not to be suspicious when the pop up refused to go away. I also had a MacAfee Internet security installed, the subscription had gotten over only a 4 days back.



BC AdBot (Login to Remove)

 


#2 Havachat

Havachat

  • Members
  • 1,050 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Sleepy Hollow - Geelong - Go Cats.
  • Local time:05:38 PM

Posted 23 December 2016 - 01:44 AM

Hopefully someone may be able to assist you , in the meantime dont delete anything that pertains to any keys etc.

If it something new then id say you may be out of luck or be waiting sometime for a fix.

 

Does it give a "Note" to pay and recieve the Key to unlock them ? { 50/50 chance } anyway if they do unlock.

 

This is why we always say on BC - If you really need important files ? Then BACKUP to external Drives and keep them Offline.

 

Hang in there !



#3 Agent_KS

Agent_KS
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:01:08 PM

Posted 23 December 2016 - 01:57 AM

Yes there is a note file, with instructions to pay and how to pay. Problem is, they are asking for a huge fee. One I cannot afford. I couldn't afford to change my laptop screen which is like 1/10 the amount they are asking for. So its a no go there!! I have the ransom file and encrypted files. Which I can share if someone can help me out. My lifes kinda depending on the fix now. I have about 4 months before my thesis submissions and graduation and stuff.



#4 EmreKrpksz

EmreKrpksz

  • Members
  • 2 posts
  • OFFLINE
  •  

Posted 23 December 2016 - 06:52 AM

I have the same problem...



#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,399 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:03:38 AM

Posted 23 December 2016 - 07:26 AM

Unfortunately, there is no longer any way to provide decryption for newer PClock variants without paying the ransom. The Emsisoft Decrypter created for earlier PClock variants will not work. Fabian explains why in Post #987.

Just as a heads up: We released a blog post about the newest variants and why we are unable to help.


There are ongoing discussions in these topic where you can post comments, ask questions and seek further assistance. Other victims have been directed there to share information, experiences and suggestions.Rather than have everyone with individual topics, it would be best (and more manageable for staff) if you posted any more questions, comments or requests for assistance in the above support topic discussion...it includes experiences by experts, a variety of IT consultants, end users and company reps who have been affected by ransomware infections. To avoid unnecessary confusion, this topic is closed.

Thanks
The BC Staff

Thanks
The BC Staff
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users