6 Replies Latest reply on Apr 3, 2016 12:36 PM by ssprengel

    Crypted files in Lr

    kenm81246519

      Dear all, I have a problem with lightroom. I did something yesterday that caused my files to be crypted. So now I don't have access to any pictures or document on my computer. Is there anybody who knows what I have done and how to fix it?

        • 1. Re: Crypted files in Lr
          kenm81246519 Level 1

          I have found a damage report in my picture Library. I suspect this can be a virus. See enclosed read me.

          • 2. Re: Crypted files in Lr
            dj_paige Level 9

            Dear all, I have a problem with lightroom. I did something yesterday that caused my files to be crypted.

            I don't understand this. What do you mean "caused by files to be crypted"? Explain in detail. Show us a screen capture.

            • 3. Re: Crypted files in Lr
              kenm81246519 Level 1

              Hi, dj_paige!

               

              Thank you for your reply. I did something yesteday in Lightroom that caused all my files on the computer to be encrypted. All my documents and files has an encrypted ending, e.g. NEF.crypted. After several hours I found out that what I did in Lr is most likely not the cause. It just happend as an coincident. The cause is the cryptoclocker virus RSA 4096, which force me to pay money for opening the files. Which will be over my dead body. Nevertheless, my problem is not fixed and I'm searching for a way to solve the problem at the moment.

               

              This is the threat I received and that corrupted my files. Thousands of pictures and documents. I have a back-up on my pictures but not my documents.-( Just want to warn the Adobe community. If somebody has a solution I would appreciate help.

               

              NOT YOUR LANGUAGE? USE https://translate.google.com

              What happened to your files ?
              All of your files were protected by a strong encryption with RSA4096
              More information about the encryption keys using RSA4096 can be found here: http://en.wikipedia.org/wiki/RSA_(cryptosystem)

              How did this happen ?
              !!! Specially for your PC was generated personal RSA4096 Key , both public and private.
              !!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet.
              !!! Decrypting of your files is only possible with the help of the private key and decrypt program , which is on our Secret Server

              What do I do ?
              So , there are two ways you can choose: wait for a miracle and get your price doubled, or start obtaining BITCOIN NOW! , and restore your data easy way
              If You have really valuable data, you better not waste your time, because there is no other way to get your files, except make a payment

              For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below:

              1 - http://klgpco2v6jzpca4z.onion.to

              Your personal id AF381528548E
              If for some reasons the addresses are not available, follow these steps:

              1 - Download and install tor-browser: http://www.torproject.org/projects/torbrowser.html.en
              2 - After a successful installation, run the browser
              3 - Type in the address bar: http://klgpco2v6jzpca4z.onion
              4 - Follow the instructions on the site

                              IMPORTANT INFORMATION

              Your personal pages

              http://klgpco2v6jzpca4z.onion.to

              Your personal page Tor-Browser  http://klgpco2v6jzpca4z.onion

              Your personal id AF381528548E

               

              Kind regards,

               

              Ken

              • 4. Re: Crypted files in Lr
                Jao vdL Adobe Community Professional & MVP

                Realize that email to this forum gets all its attachments stripped so we can't see your attachment. It sounds to me however from your description and the ransom note that you got hit by encryption ransomware: Ransomware - Wikipedia, the free encyclopedia. Those are really nasty pieces of software and you need to get rid of it before you do anything else. In some cases these burrow even in the boot blocks of your hard drive and even reformatting your hard disk and starting over doesn't get rid of them. I (luckily) have no experience with these but have read about them.

                • 5. Re: Crypted files in Lr
                  kenm81246519 Level 1

                  Thanks for your feeback! Yes I have realized that this is something really bad and difficult to handle.

                   

                  Best,

                  Ken

                  • 6. Re: Crypted files in Lr
                    ssprengel Adobe Community Professional & MVP

                    Restoring from backup or paying the ransom is the only way to get your files back.

                     

                    This has nothing to do with Adobe or Lightroom.

                    1 person found this helpful