Recovering Files From Ransomware attack.. 'State Unrecoverable'

Recuva
1

Hi,

My computer was under attack from some ransomeware known as 'Cerber Ransomware' ..

There is 1 file in particular that i am trying to recover, a .rar file.. There were 2 versions on my computer when it was attacked New Folder.rar and New Folder.Zip

I have found 4 versions of each using Recuva but thy all say 'State: Unrecoverable'

The Rar File is 31.6 MB and i can 'recover' it to Desktop, but if i try and open it with winrar i get the message 'The archieve is either unknown format or is damaged'

The Zip file is 76.9 MB, when i try to recover it i get the message 'Unable to find file data on the disk'

Is there any possibility i can still recover these files? even partially?

2

Here is the go to site for Ransomware.

You will see the Cerber one in the list of threads

http://www.bleepingcomputer.com/forums/f/239/ransomware-tech-support-and-help/

Some info about Cerber

http://www.bleepingcomputer.com/news/security/the-cerber-ransomware-not-only-encrypts-your-data-but-also-speaks-to-you/

At the moment there is no decrypter available for this Ransomware :(

3

You can try to use TrendMicro tool (https://success.trendmicro.com/solution/1114221) and this guide (http://manual-removal.com/cerber2/)