Windows 10: Problem Decrypting System Volume

I turned off BitLocker on the C: volume in Settings/Storage/Disks & Volumes/System C:. That appears to have worked fine. But...Well before realizing I needed to decrypt C:, I had already resized that volume to make free space and then created a new volume, Data E:, in that space. That new volume showed up in Drives & Volumes as also encrypted.When I try to decrypt E: by the same method, however, I find that it has a lock-open icon on it and says, "BitLocker waiting for activation." Of course Windows 11 was already activated when I initially created a Microsoft a

:)

 

How to Decrypt *.cerber3 files?

AFAIK it's still not possible to decrypt your files for free...

In addition to what has been mentioned in the prior posts, you might want to read this:

https://www.bleepingcomputer.com/news/security/cerber-ransomware-switches-to-cerber3-extension-for-encrypted-files/

And I strongly suggest to read/do:

• How to remove ransomware the right way: A step-by-step guide
• The smartest way to stay unaffected by ransomware? Backup!

 

Windows 10 1709 System Restore problems...

That seems to be an attempt at Option 2 in the tutorial, which requires you to
a. Boot to a command prompt (Did you?)
b. You then seem to be mixing steps 3,4 and 5, thus your command is incorrect.

I suggest Option 1 is easier.

If you still have problems, please repost listing each specific step and saying which option from the tutorial you are using. Thanks.

 

Removing errant files in the "System Volume Information" folder under Windows 10.

Hi,

Thank you for posting your response.

I suggest you to first stop Volume Shadow Copy service and try to remove the files and check. Follow the steps provided below:

Step 1: Stop Volume Shadow Copy service

• 
  Press Windows logo Key + R key.
  
• 
  Type services.msc.
  
• 
  Search for Volume Shadow Copy service.
  
• 
  Right click on it and select
  Stop.
  

Now, take ownership of the System volume Information folder and then try to delete its contents.

Step 2: File permissions.

• Right click on System volume Information folder.
• Select Properties.
• Go to Security tab.
• Select the user name.
• Click on Edit button.
• Under permission to Authenticated user, check on full control.
• Click on Apply and OK button.

Hope it helps. Do let us know the status of the issue. If you need further assistance, get back to us. We will be glad to assist you.