My mom told me to recover her files because every file was renamed as ********.cerber3. She told me that she got a screen with a gray backround with some text saying "CERBER_ENCRYPTION" on top. So i searched the web on how to decrypt them. But I can't find a solution to decrypt them. She even told me
My mom told me to recover her files because every file was renamed as ********.cerber3. She told me that she got a screen with a gray backround with some text saying "CERBER_ENCRYPTION" on top. So i searched the web on how to decrypt them. But I can't find a solution to decrypt them. She even told me that if i recovered her files i will have money so please tell me how to recover it 😀
Guys im using my laptop now because my PC was infected by my mom. Her ******* USB is infected. I repeatedly told her not to plug any USB without telling me.
You could try using a program called Shadow Explorer. It uses Windows Shadow volume to recover files. Otherwise, the files are locked until a decryption key is released or you pay the ransome.
Your mom has very likely been a victim of ransomware. She must have installed or downloaded an application with malicious intent, which has now encrypted all of her files and is requiring money in exchange for them decrypting the files (which only they have the key for).
A quick search online showed that there is no known way to decrypt the files. You should have her wipe her computer completely and restore from a backup, if she has one.
Boot your PC from a Linux or Ubuntu software on a USB and see if they can something then and then you should be able to bootup with a new version of windows to resinstall.
Best method for recovery of files:
Boot from Safe Boot
Click windows button on keyborad and enter
then search rstrui.exe
Copy then goto
"C:\Windows\System32\restore and paste it. Then use system restore to restore to a older version of you pc, but also format that usb in safe mode,
If you cant format it on windows use it on xbox or linux to format 😛
If the rstrui.exe is restrui.cerber3 just change it to exe or I can send u a new version you can put on a new usb to fix it 😀
If every file even system32 files are .cerber3 you will not be likely to fix it but since your computer can start its less likely that they would crypt your system32 files and delete restores.
she was hit by ransomware… its impossible to decrypt the files just accept the loss and move on
That is a ransomeware attack. If they are genuinely encrypted by it there is NO recovery without the original encryption key. Which is deleted within a few hours if the person does not pay them. She will need to recover them from backups.