My PC has been affected with UAZQ Ransomware

[max5452]

How you dont know how you got it? You werent downloading anything? Like with torrents, or anything that you downloaded? What kind of sites do you visit?

 

[MoonStarz]

being honest I heard that they request small ammounts,of money or btc then the release the files and they actually do but could also be someone else and just get your money and leave everything locked, I don't know if there is anything besides diagnose the disk apart but the real problem is to decrypt the files.

 

[zotix]

@Juhku gave you actually the best advice. Still, I assume, unfortunately, it's too late - Probably "Malwarebytes" could be an option, otherwise - while your PC multiple times and try to get some information about the Ransomware being used. Reset your WIFI completely. Change the PC name while Whiping.
Actually, in most cases, you can find the Ransomware, or the files at least as hidden on your HD, but deleting or Shredding (e.g., with Bleachbit) might kill your OS.

So, better follow the advice of Juhku, isolate your PC, and disconnect from Bluetooth.
I would not pay for anything tbh.

Keep us updated, always willing to give some advice, as far as I can go

 

[zotix]

I can help recover your files.. but do you backup any before

In this case, you need to be careful to touch your backup before being connected to the internet with the new OS.

 

[Anne-Maree]

Disconnect it from any network to prevent the ransomware from spreading to other devices.

 

[avalanch]

Just pay them if the amount is not much

No, never pay them. Every payment received only encourages them into further development.

 

[SilverClouds]

I know that's not what you asked for, but hey *shrugs*

 

[Random007]

How you dont know how you got it? You werent downloading anything? Like with torrents, or anything that you downloaded? What kind of sites do you visit?

I think one of crack softwares is the culprit

 

[MargaretMcqueen]

I Am Facing The Same Issue
If You Got Any Solution Please Let Me Know.

 

[Professor Cat]

How you dont know how you got it? You werent downloading anything? Like with torrents, or anything that you downloaded? What kind of sites do you visit?

I feel he surely download something. I not expert on this but simple logic usually how malware spread and virus the end user need to download it thus the hacker can access the end user computer. Even he visit those " suspicious site " will not get infected I feel since he never download any thing from that site. I doubt the cookie part can trigger sometime either.

Surely here got some BHW expert on this virus, malware, hacking stuffs can correct me if i wrong?

 

[Retrvn]

Do not send them money. Delete all your files. Go to file manager to recover recent file.

 

[Random007]

I feel he surely download something. I not expert on this but simple logic usually how malware spread and virus the end user need to download it thus the hacker can access the end user computer. Even he visit those " suspicious site " will not get infected I feel since he never download any thing from that site. I doubt the cookie part can trigger sometime either.

Surely here got some BHW expert on this virus, malware, hacking stuffs can correct me if i wrong?

I wrote may be one of crack software

 

[Random007]

Try https://www.nomoreransom.org/en/index.html

It's recommended by Europol, here
https://www.europol.europa.eu/operations-services-and-innovation/public-awareness-and-prevention-guides/ransomware-malware-holds-your-computer-data-hostage-for-price
Disconnect your PC from the internet and any other networks. Unplug all connected devices (except kb & mouse).

If there's no known decryption tools, then you should give a try with basic file recovery tools.

A lot of these crappy ransomware tools just 'delete' the original files and create encrypted versions of them.
However, if the ransomware doesn't overwrite the bits from the actual storage registry, it means that the original files aren't actually fully deleted and can still be recovered with file recovery tools.

Thx

 

[Professor Cat]

I wrote may be one of crack software

This is the risky , come crack software or even crack WP theme , plugin. No doubt there are some kind hearted ones just share the legit crack version but nevertheless bound will have some inject virus , etc with it.... Sometimes you do a virus scan might not detect either. I even feel those anti virus companies purposely come out virus spread around so people will use their anti virus software.

 

[The_Raven]

I got the same problem four months ago, i just had to install a new copy of Windows,since all my files where backed up on another drive.This ransomware led to my two fb accounts to be taken,so secure your accounts as well,even if you pay these files are irrecoverable.

 

[Random007]

I got the same problem four months ago, i just had to install a new copy of Windows,since all my files where backed up on another drive.This ransomware led to my two fb accounts to be taken,so secure your accounts as well,even if you pay these files are irrecoverable.

thx

 

[ExceptionalGirl]

Why don't you guys use NOD32? I think it's the best possible antivirus out there...

 

[Random007]

Why don't you guys use NOD32? I think it's the best possible antivirus out there...

Windows defender isn’t enough?

 

[SeasonedCode]

Windows defender isn’t enough?

no antivirus can save you against new malwares that have new hashes

https://www.techradar.com/pro/security/new-malware-attacks-have-seen-a-huge-rise-in-recent-months
https://www.howtogeek.com/227386/ps...-run-something-bad-no-antivirus-can-help-you/

the best thing to do now is to disconnect your PC from your home network and then change all passwords for your accounts using your phone if not the malware has already gone through your home network to other devices

 

[Random007]

no antivirus can save you against new malwares that have new hashes

https://www.techradar.com/pro/security/new-malware-attacks-have-seen-a-huge-rise-in-recent-months
https://www.howtogeek.com/227386/psa-if-you-download-and-run-something-bad-no-antivirus-can-help-you/

the best thing to do now is to disconnect your PC from your home network and then change all passwords for your accounts using your phone if not the malware has already gone through your home network to other devices

Thx