Symptoms
My computer has been infected by a virus and now files with extensions such as .exe, .doc or .pdf have been renamed as locked-nameofthefile.ext.xxxx (where xxxx are random characters) and no longer work.
Example: locked-document.doc.jugs
Cause
Although the malware infection may no longer be present, certain files remain encrypted and renamed, becoming unusable.
Solution
In order to decrypt all the affected files, Panda Security has developed Panda Ransomware Decrypt tool.
IMPORTANT!
- Please bear in mind that Panda Ransomware Decrypt has been devised to restore files whose encryption format is locked-nameofthefile.ext.xxxx. It will not work on other type of encrypted files.
- Before you apply the solution, we strongly recommend you save a copy of all encrypted files so that, in case there are problems with the decryption process, our technicians can investigate the reason why.
Steps to run Panda Ransomware Decrypt
- Download the pandaunransom.exe file.
- Save the file to your hard disk; to the Windows Desktop, for example.
- Double-click the pandaunransom.exe file. The screen below will be displayed:
- Click the Select folder button and select the folder where the encrypted files are stored. All folders inside that folder or drive will be scanned.
- Click the Start button.
- Wait until the process is completed.
Should the tool be unable to decrypt the files, you will need to run Panda Ransomware Decrypt tool in Advanced mode. The Advanced mode requires you to locate the original version of at least one of the encrypted files before it was renamed.
Steps to run Panda Ransomware Decrypt in Advanced mode
- Double-click the pandaunransom.exe file you have previously downloaded.
- Click the Select folder button and select the folder where the encrypted files are stored. All folders inside that folder or drive will be scanned.
- Enable the Advanced Mode checkbox.
- Click OK on the message stating that you will need one unencrypted, original file and its matching encrypted one.
- Click the Original file button to select the original, unencrypted file.
- Click the Encrypted file button to select the encrypted file matching the original one selected before.
- Click the Start button.
- Wait until the process is completed.