Category Archives: Ransomware

I found out this morning that my computer had been infected with restore_files_gavva.TXT malware that adds all files with “.abc” extensions.  I had lots of important files. Therefore, I spent a good couple of hours trying to look for a solution to this and now i am sitting in front of my computer a little frustrated as i have no idea to to remove restore_files_gavva.TXT ransomware

I have a HP with Windows 7. It has a virus that has corrupted all my files in Excel and all our pictures with a adc extension,  In the folder that the files are kept it states that I need to send money to free up our files. I seerestore_files_gavva.TXT in this text and cryptoware. I have not been able to fix this. Is there something I can do? Thanks for any help.

restore_files_gavva.TXT

Restore_files_gavva.TXT Description

Restore_files_gavva.TXT is severely nasty ransomware which has recently victimized lost of PC users and got huge benefit illegally all over world. Usually, this pest can be downloaded via malicious drive-by-download scripts from corrupted porn and shareware / freeware websites, installed through spam email attachments, media downloads and social networks or executed by other threats on system. As soon as Restore_files_gavva.TXT successfully lurks into your PC, it will automatically launch itself once the Windows starts up, then it damages your programs by running lots of dangerous and unstoppable tasks in the background. After that, it uses codes to infects all your file such as media files (images, music, videos, docs, txts, etc).

Continue reading →

About restore_files_gavva.HTML Ransomware

restore_files_gavva.HTML virus is another file encrypting ransomware used by hacker to make money. It enters your system mainly via attachments of spam email, porn website and free download software and torrent files. Once it is activated, malicious Windows services will be run automatically and harmful codes will be executed to infect all your personal files including images, videos, audios, Microsoft Office files, PDF files, and emails. You will find that all your files have “.abc” extension and all folders now have a “restore_files_gavva.HTML” and “restore_files_gavva.TXT” file. No matter what file you try to open, you will be notified that the file has been encrypted and you have to visit provided website and follow instructions on that site to get the encryption key. The hacker will force you to pay lots of money to decrypt all your important files, and they can steal your sensitive information and hack your bank accounts to get all your money. Do not do anything the restore_files_gavva.HTML virus asks you to do, if you  compromise to it, what you lose is not only the files on your computer, your private information and even all your money in the bank account may be stolen by hacker. What you should do is to get rid of restore_files_gavva.HTML ransomware as quickly as possible, before it causes the worst problems to you. Follow the removal guide below to remove restore_files_gavva.HTML virus now.

restore_files_gavva.HTML ransomware

Continue reading →

My wife’s computer recently got hit by BandarChor cryptolocker virus which encrypted all the files in her computer. From what I can understand, I may not be able to save those documents and ll the other stuff . But if there is any way to get rid of this nasty virus, any advice or help is very much appreciated.

friend of mine has been infected by the BandarChor cryptolocker malware (or at least this is what I think) because he opened an email attachment and now lots of his photos have been encrypted.He gave me his hard drive and I removed every single bit of the malware but now I end up with lots of jpg files that ends with the “[email protected]” extension.With less than half of them, I simply removed the extension leaving just “.jpg” and fortunately the images are still intact but the rest is encrypted and I don’t know what to do.

BandarChor virus

About BandarChor Ransomware

BandarChor is another version of cryptolocker virus created to encrypt user’s the files and demand ransom money for decryption. Its mainly delivered in the spam email attachments and web Trojans injected on malicious websites. Once infiltrating your PC, BandarChor will be activated immediately when you launch system, then it runs CMD prompt to release its malicious codes that encrypt all files in the hard drive. You will find that you MS office documents, PDF files, images, and other kinds of files cannot be opened any more, what you will get is a warning from the virus maker who forces you to contact them via the provided email. These hackers will ask you to pay a lots of money for decrypting the files, but in fact no one knows if they will keep the promise and give back your files. In worse situation, they will hack your bank accounts as well to steal all your money if you provide banking information to them. Do not trust these evil hackers. Besides, BandarChor may keep dropping malicious codes into the infected PC and execute them to make your PC become more vulnerable to virus, and these malicious codes may also disable the firewall and antivirus program to defend itself, making itself a hard nut for your PC to crack. Undoubtedly, BandarChor is a hoax for treating you for money, please be smart and have eyes on your wallet. It’s highly recommended to be removed immediately to avoid other damages to your system and protect your precious data.

Continue reading →