hi
all my files encrypted and renamed to id-5EFB9272.[admin@datastex.club].ROGER
how could I fix it ?
ty
Help, my files are encrypted with id-5EFB9272.[admin@datastex.club].ROGER
vahidna3ri, | Roger ransomware |
Ask a question
Community Answers
Your opinion regarding Help, my files are encrypted with id-5EFB9272.[admin@datastex.club].ROGER
You must be logged in to post a comment.
If your files are appended with .ROGER extension, it means your computer has been infected with a variant of Dharma (otherwise known as Crysis) ransomware, which is one of the most prominent file locking malware around.
The first thing you should do is make a copy of the encrypted data. Then, you need to remove Roger ransomware from your machine. For that, you should perform a full system scan with anti-malware software - you can find all the detailed instructions here. In some cases, you will might have to access Safe Mode with Networking to properly eliminate the threat, as it might stop your security software from functioning properly.
Once you are done with Roger ransomware removal, you can attempt to recover your files. Currently, there are no known decryption tools that can decrypt this Dharma variant (you can check Kasperky's site from time to time, as the firm created a working tool for previous versions of the same family), but you can try using data recovery software or Windows previous versions feature.
Good luck,
2-spyware team