Does anybody know what kind of ransomware this is and if there is a tool to recover the files?
Somebody logged on to my clients computer via Remote Desktop, created a folder with 3 files in it one of them called locked.exe and ran it.
As a result, most files on the computer are encrypted. with originalname.id-somenumbers_locked
Numbers seem to point to the account number.
There is a html file in each folder HOW TO DECRYPT FILES that reads this if you open it
Your documents, photos, databases and other important files have been encrypted! To decrypt your files you need to buy the special software – «Cerber decryptor»
Data recovery requires decoder.
To obtain decoder, please, contact me by email: email@example.com
The cost of the decoder: ~800 USD
Payment only Bitcoin.