Customer was affected by the Cerber ransomware.
What is ransomware? It’s a malware that makes changes in the Windows registry, locks your device or encrypts your files, and then tells you that you have to pay ransom to get your data back. It’s not cheap, and there’s no guarantee of success.
Cerber virus is a noxious ransomware-type threat using AES encryption system to lock victim’s files. with file extensions like .cerber, .cerber2, .cerber3 or extensions of the ransom characters.
Customer’s files encrypted with extension .922f.
You should know that hackers (virus writers) do not have access to your files. Your files are just encrypted and they remain in your computer.
You can delete ransomware, however, you will not get your files back by eliminating this virus.
If you become a victim of ransomware, try free decryption tools and get your digital life back.
To protect your computer from file encrypting ransomware such as this, use reputable antivirus and anti-spyware programs.
As an extra protection method, you can use programs called HitmanPro.Alert and Malwarebytes Anti-Ransomware, which artificially implant group policy objects into the registry to block rogue programs such as Cerber ransomware.
My customer got lucky and we were able to delete the virus and restore his files by using Windows Previous Versions feature.
This method is only effective if the System Restore function was enabled on an infected operating system.
Note that some variants of Cerber are known to remove Shadow Volume Copies of the files, so this method may not work on all computers.
If you have more questions please feel free call us at (720) 841 8694 or visit us at http://www.caspicom.com