Windows 10: How to fix ransom with ".onelock" extension

Hello all,My server has been attacked by Ransomware, all my files has been encrypted,".onelock" is the extension that shows on files, doc, media and images file.unfortunately, we don't have backup for all files, is there a way to decrypt it?

:)

 

New Trojan that Demands a Ransom

There is a new virus out there discovered by virus hunters known as "Cryzip". The Trojan encrypts your files and then demands a $300 ransom for the decryption password to get your files back. After encrypting the files, the virus leaves a nice step-by-step guide of how to go about paying the ransom off. It's supposedly spread through email Spam, and has successfully evaded anti-virus scanners.

Source: eWeek

 

Ransom trojan attacked my computer

I'm sorry Michaele but some minimun info would be needed for us to try to assist you properly:

- What security program is detecting what ransom trojan? Whose detection?

- What's the name of the ransom trojan that WD won't remove?

- Is Ad-Aware (by Lavasoft) installed and providing real-time protection to your Windows 10 system?

- Any files with odd extensions (please describe) appended to their original filenames and extensions?

- Any ransom notes files (with ransom payment instructions) found in the computer (A screenshot would be nice)?

 

ransom ware

See post by quietman7 here:

https://www.bleepingcomputer.com/forums/t/635252/infect-with-osiris/#entry4143606

Copy/paste of above post:

Any files that are encrypted with the Locky (.Osiris) ransomware variant will be renamed with random alpha-numerical characters and have the
.siris extension appended to the end of the encrypted data filename (i.e. 11111111--1111--1111--FC8BB0BA--5FE9D9C2B69A.osiris) and leave files (ransom notes) named DesktopOSIRIS.bmp, DesktopOSIRIS.htm, OSIRIS-[4_numbers].htm, OSIRIS-[4_numbers].htm
as explained
here.

Unfortunately, there is no known way at this time to decrypt files encrypted by Locky variants regardless of the extension without paying the ransom.

There is an ongoing discussion in this topic where you can post comments, ask questions and seek further assistance. Other victims have been directed there to share information, experiences and suggestions.

• Locky Ransomware (Zepto) Support and Help Topic - _HELP_instructions.html

When or if a solution is found, that information will be provided in this support topic and you will receive notification if subscribed to it. In addition, a news article most likely will be posted on the
BleepingComputer front page.

Rather than have everyone with individual topics, it would be best (and more manageable for staff) if you posted any more questions, comments or requests for assistance in the above support topic discussion...it includes experiences by experts, a variety of
IT consultants, end users and company reps who have been affected by ransomware infections.
====

Also see:
https://malwaretips.com/blogs/remove-osiris-virus/