I have been hit by a ransom malware.
All my files are cripted and added an extension .mp3.
It is possible by RECUVA to uncript my files and recover the originals?
Thanks.
Vasco Caini
sorry, but No.
Recuva recovers deleted files.
your problem is your files have been scrambled with a key and only applying that key will decrypt them.
you could try and trust the low-lives that are holding your files for ransom and get the unlock key (good luck with that) or you could use any form of backup that wasn't connected at the time of 'infection'.
If you don't have backups of the files then depending on just what ransomware/malware has been used to encrypt the files then you may be able to get them back, with help.
I suggest that you go to one of the specialist FREE malware removal sites, such as the MalwareByres forum,
There are other malware removal sites as well; see item 10 here for a list:
https://forum.piriform.com/index.php?showannouncement=15&f=4
If you go to that Malwarebytes link the read the 4th post down " I'm infected - What do I do now?" to get you going.
If/when you post tell them about the encrypted files.
If you register at one of those they may be able to unencrypt the files for you, and more importantly they can give FREE one-to-one help with cleaning any and all malware from your computer.
You will get one-to-one help from one of their malware removal experts who will ask you to run a couple of programmes to see what is infecting you PC, and then customise one or more removal programmes to get rid of just what it is you have been infected with.
(You can look at some of the other threads there to see how it works, but don't use any of the removal programmes in them. They have been written for that specific user/problem).
If it is ransomware go here to have the type identified
Then go here and follow the link for your type of ransomware and see the help and info given (and if there is a decrypter for your type)
(sounds like it may be TeslaCrypt)
@nukecad & hazelnut,
have you heard of anyone having success with decrypting files once 'infected'? (without paying for the key)
If you look at the ransomwares listed in my link there will be information as to whether a decrypter is available and works for that particular 'variety'
It is very much cat and mouse, bad guys re-write and then the good guys try to re-write that.
Yes decryptors do work. Emsisoft are particularly strong in this area
https://decrypter.emsisoft.com/
However some bad guys use such a strong encryption the good guys have to search for a mistake by the baddies.
Also sometimes the bad guys server where the keys are kept is taken down..... game over then I'm afraid.