Locked I got attacked by ransomware .2k19sys

[Kimmoto]

Hey there,

anyone here have experienced in decrypting this ransomware .2k19sys
ive lost my work files and photos...

can anyone suggest steps for recovery ..or is there any viable solution to this ?

please help ;(

 

[Mirkec]

There are numerous threads with similar situation and solutions here:

You must be registered for see links

Read all three pages! I am sorry but to be honest, it is hard to remove it and recover your data successfully, but maybe you have luck!

 

[SanMir]

lets do it step by step
1. scan your pc with anti malware apps like malwarebyte
2. remove the ransomware
3. look for an apps that will decrypt files being encrypt by ransomware

 

[Mr. Spacely]

Best solution is to use ad blockers and watch what you install and from where

You must be registered for see links

 

[Storm Breaker ⛏]

You must be registered for see links

 

[joed4u]

Try the following steps....

1. Remove the HDD from the PC
2. Connect it to another PC running with good Antivirus as a slave
3. Scan the HDD
4. Check the files to take backup.

 

[chadcoolest]

Try the following steps....

1. Remove the HDD from the PC
2. Connect it to another PC running with good Antivirus as a slave
3. Scan the HDD
4. Check the files to take backup.

making sure that secondary pc doesnt have any vital data and is disconnected from network. I'm sure in due time someone will make a decrypt utility.
and yes what Iceman quoted, keep off the adult entertainment and free movie streaming sites

 

[Kimmoto]

@chadcoolest , @joed4u, @Iceman96 , @Storm Breaker ⛏ ,@Victor24 , @Mirkec

Heres and update.


What i did :

1. i took out the HDD win7
2. i put in a blank win10 recovery SSD
3. i did a scan with malwarebytes using the the win10 recovery
4. i put on the HDD win7 back
5. i entered safemode and cleared out all the files in %TEMP% folder.
6. i disabled all startup apps, and found some unknown apps running.
7. i managed to install Malwarebytes and now its still scanning.

Information i gathered is this .2k19sys made a copy of the files and then encrypt the copy. Then it deletes the original file.
SO IM HOPING THAT I WILL ABLE TO RECOVER USING some or any recovery softwares eg.
RECUVA or maybe EASEUS.

i dont know its still scanning for VIRUS, MALWARE...

pray for me.

thanks guys.

ill keep updating on the progress.

 

[TheSamurai]

To eliminate 2k19sys Ransomware Is recommend scanning your computer with Bitdefender.

Here is the free offer invite link:

You must be registered for see links

 

[joed4u]

You can also recover your files using Linux Live CD/DVD with booting in to with Try option.

 

[SanMir]

@chadcoolest , @joed4u, @Iceman96 , @Storm Breaker ⛏ ,@Victor24 , @Mirkec

Heres and update.


What i did :

1. i took out the HDD win7
2. i put in a blank win10 recovery SSD
3. i did a scan with malwarebytes using the the win10 recovery
4. i put on the HDD win7 back
5. i entered safemode and cleared out all the files in %TEMP% folder.
6. i disabled all startup apps, and found some unknown apps running.
7. i managed to install Malwarebytes and now its still scanning.

Information i gathered is this .2k19sys made a copy of the files and then encrypt the copy. Then it deletes the original file.
SO IM HOPING THAT I WILL ABLE TO RECOVER USING some or any recovery softwares eg.
RECUVA or maybe EASEUS.

i dont know its still scanning for VIRUS, MALWARE...

pray for me.

thanks guys.

ill keep updating on the progress.

You can recover it .

 

[AgzaJM]

Best solution is to use ad blockers and watch what you install and from where

You must be registered for see links

Agreed

 

[Kimmoto]

Here's an update I manage to recover like only a little portion of my photos..

Going into deep scan with Recuva.. Since it's a 1TB worth of data was encrypted..

I hardly recovered 100mb

Any other methods for disaster recovery???

 

[Gollapudi]

May be give these a try

You must be registered for see links

You must be registered for see links

You must be registered for see links

 

[SanMir]

Here's an update I manage to recover like only a little portion of my photos..

Going into deep scan with Recuva.. Since it's a 1TB worth of data was encrypted..

I hardly recovered 100mb

Any other methods for disaster recovery???

brother, you know, having problem like what you had wasn't easy. 1. It requires hard work 2. Dedication to address the issue and more. By then, expect the unimaginable consequences to deal with.
And lastly, don't think about easy task addressing the issue. Just don't give up, take your time and enjoy your work.

 

[Kimmoto]

brother, you know, having problem like what you had wasn't easy. 1. It requires hard work 2. Dedication to address the issue and more. By then, expect the unimaginable consequences to deal with.
And lastly, don't think about easy task addressing the issue. Just don't give up, take your time and enjoy your work.

thank you brother. i manage to recover approximate of 100GB worth of datas and videos.
and some documents are totally screwed

at the mean time at least they are photos..

i hope someone will come up with a decryptor for 2k19SYS ;(

anyways i managed to get some.

 

[Mirkec]

There is no such thing dude! I am sorry but next time be more careful! You did well with 100 MB
There is nothing to say here anymore! All solution is already given!

 

[Kimmoto]

May be give these a try

You must be registered for see links

You must be registered for see links

You must be registered for see links

im yet to try these!

 

[Suvam4549]

That's exactly what I have been doing for past 5-6 years.. Never got a virus let alone ransomware. Happy to know that I am not wrong and others are also doing the same. It helps a lot in entry level systems like mine (i3-540, 4 GB RAM). Cheers.

 

[Mr. Spacely]

@Kimmoto This thread has gone on long enough. Completed now before going on to second page. Good luck.