Windows 10: hackers asking me 490$ to remove .cosakos encrypted files

yesterday i faced a problem that all my files are effected by .cosakos ransomeware pls help me

:)

 

hackers asking me 490$ to remove .cosakos encrypted files

yesterday i faced a problem that all my files are effected by .cosakos ransomeware pls help me

 

hackers asking me 490$ to remove .cosakos encrypted files

Hi yoganandamuni

I am sorry this has happened to you and I would advise against paying the hackers . . .

Check the link below to see if the STOPDecrypter they are developing on that site can decrypt your files

If not, copy your files to another drive and wait until a decrypter for cosakos becomes available

You will find a lot of websites that will try to get you to purchase software to remove the ransomware, they will not work, ransomware decrypters are developed for free

https://www.bleepingcomputer.com/forums/t/67147...

________________________________________________________

Standard Disclaimer: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research
any product advertised on the site before you decide to download and install it.

.

 

hackers asking me 490$ to remove .cosakos encrypted files

To add insult to injury, there are by now hundreds of phony websites that offer to decrypt your files, when what they really do is add more malware to your computer. It's difficult to know whom to trust.

Even among websites that many consider trustworthy, their proposed solutions may be outdated. Attackers read those websites too, and modify their attacks accordingly. And even the best among these trustworthy websites are volunteers trying to fight against
the concerted efforts of professional attackers.

Under the best of circumstances, organizations offering to help need to be able to examine your computer, in order to figure out exactly how your files were encrypted. Otherwise, nobody can be really sure how you were attacked and what to do about it, or
if anything can be done.

Even if you pay the ransom, there's no guarantee that your files will be decrypted, and if you pay, you'll probably me targeted for more attacks. That's why it's a good idea to refuse to pay the ransom, unless you truly have no choice.

Face it: In all likelihood, you will not recover your files any time soon, and very possibly never will. And recovering your files isn't even your biggest problem: You can be sure that the attackers are reading your files and looking for personal information
that they can use to impersonate you. To an attacker, that's where the real money is.

Here's what I recommend:

1- Disconnect your computer from the internet.

You can't be attacked any further if you're not connected to the internet.

2- Make copies of your encrypted personal files (documents, pictures, etc.) Store them in their own USB flash drive or external drive.

3- Make an image of your encrypted hard drive, and store the image together with your encrypted files.

At some future time, professionals may be able to decrypt your files if you can show them your copies.

4- Do a low-level format of your hard drive - that's where your entire hard drive is overwritten with zeros. There are instructions on the internet or you can ask a professional to do it for you.

5- Do a clean install of Windows and all your software. Easiest of all is a factory restore which returns your computer to exactly the way it was when it left the factory, hence the name. Your computer's manufacturer has instructions for this on
their website. It's fast and easy, unless your recovery partition has also been encrypted.

Now you can reconnect your computer to the internet.

6. Very important:

• Change all your passwords to online accounts.
• Inform friends and family what happened so they will be wary of being attacked from emails allegedly from you. You may need to get new email accounts.
• Be on the lookout for signs that your identity has been stolen.