katia asked 5 years ago
the computer has already been formatted and infected the external hard disk and encrypted everything in ALKA. There is no directory system ID folder. What do I do?
Myantispyware team Staff answered 5 years ago
In each directory where there is at least one encrypted file, you can find a file named ‘_readme.txt’, this file contains a message from the ALKA virus authors and your Personal ID. If this ID ends in ‘t1’, then your files were encrypted with an offline key, and as soon as the researchers determine this key, you can immediately decrypt the encrypted files using free STOP Djvu Ransomware Decryptor. If the ID does not end with ‘t1’, then I recommend using alternative methods of recovering the contents of encrypted files. These methods are described in detail in the article, the link to which I give below:
How to recover ransomware encrypted files.
