How to Decrypt and Recover Files Encrypted by Cryptolocker

My computer has been infected with a cryptolocker which has encrypted all of the files on the hard drive and added the 795256hz extension to their names. For example, an abc.pdf file was encrypted and became abc.pdf.795256hz. Does anyone know how to decode the encrypted files and recover my files? This virus will place a file named 795256hz-readme.txt beneath each folder, with the contents depicted in the figure. Any advice you have is appreciated.

Best Answered by

Dany· Answered on Mar 10, 2023

Cryptolocker attacks your files by encrypting the files' copies. However, these copies are not the original files. The virus deletes the original files rather than immediately encrypting them. As a result, you can retrieve the deleted source files using a data recovery tool. There is a chance of recovery as long as the data recovery program locates the destroyed source files.

 Download for Win Recovery Rate 99.7%
 Download for Mac Trustpilot Rating 4.6

As a first step, try EaseUS Data Recovery Wizard. It is a reliable file recovery program that can restore files infected with the Locky virus as well as other ransomware infections like CryptoLocker.

Step 1. Choose the drive with the malware to scan: Activate the EaseUS virus file recovery program on your Windows computer. To search for missing or hidden files, choose the disk that was infected by the virus.

Step 2. Examine all of the scan results: As soon as you launch EaseUS Data Recovery Wizard, a scan of the virus-infected hard drive will begin to look for you deleted or hidden files. You can use the Filter or type grouping tool to display only the desired documents, emails, movies, and other files in order to find them quickly.

Step 3. Examine and restore deleted or hidden files: You can view a preview of the scanned files after the process is complete. Click the "Recover" button after selecting the files you desire. Instead of where they were lost, you should save recovered files to another secure location on your computer or storage device.

Note: Installing the software on a separate volume or an external USB drive is preferable if the HDD has files that viruses have hidden or erased in order to prevent data overwriting. It doesn't matter if the infected device is an external hard drive, flash drive, or memory card when the software is installed on the computer's local drive.

Using their shadow copies, you can also retrieve earlier iterations of the encrypted files. Windows makes shadow copies as snapshots that can be used as a backup in the event of a system restore.

  • Click on a file and choose "properties" from the context menu to see if shadow copies can be used to recover it.
  • Choose the "prior versions" tab in the properties window.

The most current version of the file can then be restored after you view a list of all the earlier versions. You can run a System Restore to return your computer to a time before the infection and restore these files in bulk.

Use EaseUS Data Recovery Wizard to recover deleted or lost files easily and quickly.

Tutorials on how to recover lost, deleted, or formatted data from HDD, SSD, USB, SD card, or other storage media on Windows and Mac.

People Also Ask

Does Windows Server Essentials Shared Folder Have Recycle Bin

It is clever to look for a data recovery method to protect your data on Windows Server. We will provide two methods to recover data and give you some tips to protect your data.


Mar 09, 2023

How to Recover Deleted Word File by CTRL + Z and CTRL + Y

Is it possible to recover an unintentionally unsaved Word document on a Windows? Fortunately, we'll review this topic and offer options for recovering your deleted Word document. So, if you wish to retrieve this accidentally unsaved Word document on a Windows, there are a few options.


Mar 10, 2023

How Can I Recover Lost MRW Files on Windows OS

Whenever your image files, including PNG, JPG, JPEG, GIF, SVG, MRW, etc., become RAW, you can get them back with EaseUS Data Recovery Wizard. This RAW recovery software can restore data from any storage media like a flash drive, external hard drive, etc.


Feb 27, 2023

How to Recover Deleted Emails Message in Outlook 365 [Microsoft Tips]

Suppose you wish to recover deleted emails that you hard erased (or, more precisely, permanently deleted) from Microsoft Outlook 2016, 2013, or any other Outlook version. Breathe easily. Outlook's Deleted Items folder and the email recovery program EaseUS Data Recovery Wizard both allow you to retrieve deleted emails.


Mar 10, 2023

How to Show and Recover Hidden Files on Memory Card on Windows

Does your memory card appear on the computer but is not showing files? This page shows you how to use the Attrib command to show hidden files. If it does not help, download and try EaseUS data recovery software to find and recover hidden files on your memory card effectively!


Mar 10, 2023

How to Recover Files Deleted by CHKDSK [2023 Update]

Data files lost after running CHKDSK scan? CHKDSK delete your files? This page shows you how to undelete or recover files deleted by CHKDSK with simple steps by yourself using powerful and easy-to-use Windows file recovery software.


Mar 10, 2023