Hello. Can someone help me to decrypt my files?
They are blocked by Cerber and they all have now cerber2 extension at the end. How can I decrypt them? I found some informations on a german page virus-entferner: http://www.virus-entferner.de/2016/08/04/cerber2-ransomware-virus-entfernen/ but I am not sure what Antimalware software I have to use in my situation. Thank you for your help.
- Mario asked 2 months ago
- last edited 2 months ago
You have my sympathy. Cerber is, regrettably, pretty sophisticated software, particularly the new variant that infected your system.
Just looking at recent blog posts it appears that there are no current quick decrypts available (that I can see) but there may be ways of recovering some of your files. I hope that one may work for you.
Malwarebytes and similar products are useful for prevention although there is always the chance of a zero-day infection before these good people get a profile that they can use to protect your system. It would be unwise to rely on any software prevention tool. Good practice has to be used to avoid infection in the first place.
Bleeping Computer tend to keep a good review of available responses to everything from adware to ransomware, that is worth bookmarking:
Hopefully you can recover some of your files (top link above) otherwise it’s back to having a full system and/or personal files backup available.
Hello! First of all use new Trend micro tool ( http://esupport.trendmicro.com/solution/en-us/1114221.aspx ) that can cope with Cerber V1 ransomware. Also you can use this guide ( http://manual-removal.com/cerber/ ) along with ShadowExplorer or Recuva.
To remove this ransomware, you have to clear all its traces from your PC. Usually, there is a common way for PC users to remove malware from their machines – perform a system restore (http://guides.uufix.com/how-to-remove-cerber-ransomware-from-your-pc/). Truly, this method is effective for some malware; however, it may not work when your computer is infected with this ransomware. You can have a try. And unluckily, there is no effective decrypter for this malware so far.
It was once successfully decrypted, but developers of cerber soon discovered the vulnerability and fixed it in a matter of days. Now new cerber extensions are reported. cerber2 and cerber3. Cerber2 was the one with the most significant changes. Unfortunately the only way to recover encrypted files as for now is to pay the ransom fee. http://www.securityspyware.com/cerber3-ransomware-virus-extension-removal/
Cerber 3 is a Ransomware software that when it infects your computer, it encrypts all the files in it. The bad news with this virus is that, once it infects your
computer, your critical files are encrypted with strong encryption and it is practically impossible to decrypt them.
This Cryptolocker Ransomware demands that you make a payment of 300$ or 300€ in a specific period of time (e.g. 72h or 100h), through a payment service (e.g.
MoneyPak, Ukash, PaySafeCard, etc.) in order to unlock your files. otherwise -after that period- nobody can restore or decrypt them.
Please login first to submit.