You're in: Panda Security > Home Users > Support > Product Knowledge Base

What kind of help do you need?
(Examples:“Panda Security 2011 installation”, “I want to contact Panda”)
Print

How to restore renamed .exe, .doc and .pdf files with Panda Ransomware Decrypt tool 

Information applies to:

Products
Todos los productos

Symptoms

My computer has been infected by a virus and now files with extensions such as .exe, .doc or .pdf have been renamed as locked-nameofthefile.ext.xxxx (where xxxx are random characters) and no longer work.

Example: locked-document.doc.jugs

Cause

Although the malware infection may no longer be present, certain files remain encrypted and renamed, becoming unusable.

Solution

In order to decrypt all the affected files, Panda Security has developed Panda Ransomware Decrypt tool.

IMPORTANT!

  • Please bear in mind that Panda Ransomware Decrypt has been devised to restore files whose encryption format is locked-nameofthefile.ext.xxxx. It will not work on other type of encrypted files.
  • Before you apply the solution, we strongly recommend you save a copy of all encrypted files so that, in case there are problems with the decryption process, our technicians can investigate the reason why.

Steps to run Panda Ransomware Decrypt

  1. Download the pandaunransom.exe file.

  2. Save the file to your hard disk; to the Windows Desktop, for example.
  3. Double-click the pandaunransom.exe file. The screen below will be displayed:

  4. Click the Select folder button and select the folder where the encrypted files are stored. All folders inside that folder or drive will be scanned.
  5. Click the Start button.
  6. Wait until the process is completed.

Should the tool be unable to decrypt the files, you will need to run Panda Ransomware Decrypt tool in Advanced mode. The Advanced mode requires you to locate the original version of at least one of the encrypted files before it was renamed.

Steps to run Panda Ransomware Decrypt in Advanced mode

  1. Double-click the pandaunransom.exe file you have previously downloaded.
  2. Click the Select folder button and select the folder where the encrypted files are stored. All folders inside that folder or drive will be scanned.
  3. Enable the Advanced Mode checkbox.
  4. Click OK on the message stating that you will need one unencrypted, original file and its matching encrypted one.

  5. Click the Original file button to select the original, unencrypted file.
  6. Click the Encrypted file button to select the encrypted file matching the original one selected before.
  7. Click the Start button.
  8. Wait until the process is completed.

Help nº- 20140109 1675 EN
survey

Help us improve our service by letting us know your opinion.

Your suggestions will help to resolve your questions more quickly and effectively.

Have you resolved your query with this article? YES NO Thanks for your answer

How would you improve this article?

Do you want to contact TechSupport?