Urgent: My files are being attacked by a virus...
in IT Support ·
I mean, what kind of Accenture expert are we even talking about here?
It’s ransomware, plain and simple—no hidden files to find and zero chance of a quick restore.
My best advice? Just grab all those encrypted files, dump them onto an external drive, and hang onto them... maybe, if you're lucky, a decryptor for this specific strain will pop up eventually. I'd say there's like a 90% chance it happens sometime in the near future.
But look, without that private RSA key the virus uses to lock everything down, honestly, no tech guru or hacker is going to be able to help you out (trying to brute-force an RSA key would basically take a hundred years, I guess).
So, yeah, just save all the infected files to a thumb drive, wipe your machine and reinstall macOS, and then maybe once a week just Google ".remk decryptor" until something actually comes out. When it does, download it and hopefully, it'll give you your files back.
There used to be an older version of the RemK ransomware that people could crack using a StopDjVu decryptor, but since you've got the newer version, there isn't a tool for it yet, so... I guess you just have to be patient.
And whatever you do, please don't try to rename the files by stripping the extension—like trying to change 'jpg.text.remk' back to just '.jpg'—because if you do that, you might lose those files forever.
It’s ransomware, plain and simple—no hidden files to find and zero chance of a quick restore.
My best advice? Just grab all those encrypted files, dump them onto an external drive, and hang onto them... maybe, if you're lucky, a decryptor for this specific strain will pop up eventually. I'd say there's like a 90% chance it happens sometime in the near future.
But look, without that private RSA key the virus uses to lock everything down, honestly, no tech guru or hacker is going to be able to help you out (trying to brute-force an RSA key would basically take a hundred years, I guess).
So, yeah, just save all the infected files to a thumb drive, wipe your machine and reinstall macOS, and then maybe once a week just Google ".remk decryptor" until something actually comes out. When it does, download it and hopefully, it'll give you your files back.
There used to be an older version of the RemK ransomware that people could crack using a StopDjVu decryptor, but since you've got the newer version, there isn't a tool for it yet, so... I guess you just have to be patient.
And whatever you do, please don't try to rename the files by stripping the extension—like trying to change 'jpg.text.remk' back to just '.jpg'—because if you do that, you might lose those files forever.