I need help. Ransomware [saveyourfiles@qq.com]

[JamesQ]

Hello.


I got such a problem. My production server was encrypted with ransomware [saveyourfiles@qq.com].


I wrote to him in the mail [saveyourfiles@qq.com]. He demanded $ 7,000 from me. I paid him this amount but after receiving the money he stopped responding to me. What should I do? There are a lot of important files of my company on the server. I lost all contacts. I tried to write to him from different emails but he does not answer me as soon as he finds out that I already paid him


Please help me. What needs to be done to return my files?

 

[nasdaq]

Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

This is not good news.

Read about it.

writehere@qq.com ransomware - Ransomware Help & Tech Support

writehere@qq.com ransomware - posted in Ransomware Help & Tech Support: Hi BC i have a ransomware on one of my servers. It has encrypted everything on the server. How do I remove this from my server?

www.bleepingcomputer.com

It's too late now but we do not recommend the any payments be made to this scammer.
===

Some of your computer settings may have been changed.

If you want we can review them and advise.

Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

How to attach a file:
In the Reply section in the bottom of the topic Select Click the Choose a File.
Navigate to the location of the File.
Click the file. It will appear in section.
Click the Saving button.

Please attach the logs for my review.

Wait for further instructions
====

 

[nasdaq]

Are you still with me?

 

[dmorenomex]

Are you still with me?

I have the same issue. Could you tell me what's next please?

Regards

 

[nasdaq]

Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.

If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===

You need to start you own topic.
Read these instructions and proceed.

By Staff - ***READ ME BEFORE POSTING IN THIS FORUM***

1. General rules for all the forums : Rules 2. Specific rules for this forum: This section of the forum provides help in identifying, removing malware and other general questions about malware. Please note that forum is staffed by volunteers. Be patient whilst waiting for a reply - there are...

malwaretips.com