1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Cryptoblocker aftermath: decrypting files

Discussion in 'Virus & Other Malware Removal' started by QuesterLEJ, Apr 7, 2015.

Thread Status:
Not open for further replies.
  1. QuesterLEJ

    QuesterLEJ Thread Starter

    Apr 7, 2015

    A few months ago my Windows 8.1 PC was infected with the CryptoBlocker virus. Instead of removing the virus outright, I simply reformatted my hard drive and reinstalled the OS, thinking that whatever files the virus had encrypted were on my machine (nothing I couldn't replace). I was wrong.

    I just took a look at my OneDrive contents (after not needing to use it for a while) and saw that all Office documents I had saved now include the .ECC extension. After some digging I discovered that this indicates (no surprise) that the files were encrypted via "Elliptical Curve Cryptography," no doubt by the virus.

    Since I am no longer infected with CryptoBlocker, I cannot remove the virus. Is there a way I can remove the encryption? Some of the files are quite important, including the beginning of a manuscript for a novel I am writing. Any assistance gladly welcomed!

    I am very tech-savvy and have no problem "getting my hands dirty."

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/1146179

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice