Yesterday night, strange things happened and in the morning i saw one of my server was crashed. When I got into it, I saw most of the file names were edited and at the end of its extension, “.crypt_sherhagdomski@godzym_bid” was added. I was unable to resolve this issue. Can anyone help me in this regard, so that I can recover my server along with its data.
Regards.
I find .crypt_sherhagdomski@godzym_bid extension appended to my files. Can you help?
kashif, | CryptXXX ransomware virus |
Ask a question
Community Answers
Your opinion regarding I find .crypt_sherhagdomski@godzym_bid extension appended to my files. Can you help?
You must be logged in to post a comment.
It seems that your files have been encrypted by the notorious CryptXXX virus that is active since 2016. Unfortunately, you need to employ professional anti-malware tools to remove it completely before you can do anything about the encrypted data.
The original code of those files got changed and the only solution is either decryption or data recovery. You shouldn't trust cybercriminals, so paying the ransom is not a good option. There is no official decryption tool that could work for this virus and encrypted files either.
You should focus on the CryptXXX ransomware removal and follow the suggested steps in this article. When your device is fully cleaned you can restore data using your backups or file recovery software.
Best regards,
2-spyware support