yesterday most of my files changed extension and now they are like name of file then an ID then .UIWIX for example a link on desktop now has this name "Malwarebytes Anti-Malware.lnk._2883765424.UIWIX" . On the desktop there is a file called "_DECODE_FILES.txt" with this text:
>>> ALL YOUR PERSONAL FILES ARE DECODED <<<
Your personal code: 2883765424
To decrypt your files, you need to buy special software.
Do not attempt to decode or modify files, it may be broken.
To restore data, follow the instructions!
You can learn more at this site:
If a resource is unavailable for a long time to install and use the tor browser.
After you start the Tor browser you need to open this link http://4ujngbdqqm6t2c53.onion
I tried to upload this file on the ID Ransomware page but it was unable to determine.
I scanned and removed all files found by Malwarebytes.
What variant of ransomware is this? is there a possibility that i can decrypt my files?
Thanks in advance
Edited by StevyC, 09 May 2017 - 07:57 PM.