A Trojan Has Encrypted My Whole Data

Tags:
File encryption
Trojan
WORM
Yesterday i was doing some serious work on my computer which required me to disable my Avast Antivirus temporarily, during this time a suspicious web page managed to send a Trojan which replaced all my file extension with "NASOH" extension and encrypted as i am unable to execute or play anything since then.
Now the existing solution for Trojan with encryption attack doesn't list the one i have, what should i do to Decrypt them definitely shadow copies and backup is out of question.


Software/Hardware used:
Trojan, Worm, File Encryption
0

Answer Wiki

Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.

Discuss This Question: 7  Replies

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when members answer or reply to this question.
  • ToddN2000
    I'm a little suspicious of anything that requires me to disable my antivirus software. That is usually a warning sign. AS for the website that sent the Trojan, did you click on a link or was it a link sent in an email?  The NASOH file extension is a ransomware style virus. Check out this link for removal 
    132,660 pointsBadges:
    report
  • carlosdl
    Why did you need to disable your AV protection?

    As you have learned, you should not browse the net without protection, and even more important, you should not visit unknown sites indiscriminately.

    Now, if the article suggested by Todd doesn't help, and you have information that is important to you stored in that machine, you may need to pay some professional in the field to try and fix the problem for you.

    Good luck.
    84,745 pointsBadges:
    report
  • Subhendu Sen

    What serious works were there that you bound to disable anti virus? You mentioned it replaced all of your file extensions. Btu what kind of files are there? What did it mean all files? Is this virus replaced the system files also or just harmed your general files? Are you able to run the installed anti virus again to clean this system?


    138,820 pointsBadges:
    report
  • Subhendu Sen

    Moreover, you can try to run MWAV (an emergency virus cleaner), which can help to handle this situation. Boot the system in Safe mode & try to run this one. However more information is always needed.


    138,820 pointsBadges:
    report
  • KantVoors
    I generally recommend never disabling your antivirus, even when a program specifically tells you to do it. There's few times when disabling it actually helps do something you need to do. From what I understand only a few files are being encrypted and you can still access your pc?
    100 pointsBadges:
    report
  • Subhendu Sen
    Sometimes, it might be required to disable installed anti virus for a particular software/ tool installation while we know this software/ tool is not harmful. But presenting autorun.inf file or something like, anti virus teats that is a virus. And block/ stop the installation. But keep in mind, if that case, you must enable again the antivirus immediately.
    138,820 pointsBadges:
    report
  • Jaideep Khanduja
    Are you sure it for encrypted or corrupted?
    19,150 pointsBadges:
    report

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

To follow this tag...

There was an error processing your information. Please try again later.

Thanks! We'll email you when relevant content is added and updated.

Following

Share this item with your network: