Kaspersky
Solved

REMK

  • 17 March 2020
  • 2 replies
  • 970 views

my computer was attacked by a vírus who change all my office Docs with extention *.remk how can do to have back my docs my restore point back wasn’t actived i can’t go back what can do

 

icon

Best answer by Caos 18 March 2020, 08:33

Hi,

In terms of recovering/decrypting the files, this type of virus usually encrypts the files with very high bit keys, and in very rare cases a decryptor can be created, usually due to failure or careless programming of the malware.
But in the vast majority it is not possible, at least at the moment.

You can check if the ransomware that attacked you currently has the possibility to be decrypted here: https://id-ransomware.malwarehunterteam.com/index.php?lang=en

You can find information that can help you here: https://www.nomoreransom.org/en/index.html

Also try the utilities offered by Kaspersky: http://support.kaspersky.com/viruses/utility

Your computer is infected with the STOP/DJVU “family“ ransomware.

Try with this tool.

If you are a Kaspersky user with a valid license, open a support ticket in my Kaspersky account, send them a sample of an encrypted file, and if you have the same file unencrypted.

Regards

View original

2 replies

my computer was attacked by a vírus who change all my office Docs with extention *.remk how can do to have back my docs my restore point back wasn’t actived i can’t go back what can do

Userlevel 7
Badge +11

Hi,

In terms of recovering/decrypting the files, this type of virus usually encrypts the files with very high bit keys, and in very rare cases a decryptor can be created, usually due to failure or careless programming of the malware.
But in the vast majority it is not possible, at least at the moment.

You can check if the ransomware that attacked you currently has the possibility to be decrypted here: https://id-ransomware.malwarehunterteam.com/index.php?lang=en

You can find information that can help you here: https://www.nomoreransom.org/en/index.html

Also try the utilities offered by Kaspersky: http://support.kaspersky.com/viruses/utility

Your computer is infected with the STOP/DJVU “family“ ransomware.

Try with this tool.

If you are a Kaspersky user with a valid license, open a support ticket in my Kaspersky account, send them a sample of an encrypted file, and if you have the same file unencrypted.

Regards

Reply