Password reset and notification emails are now sending correctly.
If you recently requested a password reset, please check your inbox (and spam folder just in case).
You can now reset your password and log in as normal.
Welcome back to PCHF, and thank you for your patience during our migration process!
โ The PCHF Team
Welcome to PC Help Forum!
Youโre viewing our community as a guest.
That means you can browse posts, but canโt yet reply or start new topics.
Join us today โ it's completely free!
As a member, you'll be able to:
โ Get personalized tech support from trusted volunteers
๐ฆ Work one-on-one with our Malware Removal Specialists
Hello, a while back I had to restore windows 10 on my laptop because of a virus. I couldnโt make a back-up of the files because the virus was doing itโs work I guessโฆ
There were some pictures and videos that I didnโt want to lose and those pictures/videos turned into โmxpchyvlโ files because of the windows restore.
Does anyone know if there is a way to recover/restore these files?
Look in the HDD directories and see if there is a Directory called Windows.old
If there is one then the files you want may be there. If not then you could try changing the extensions on some of the files and see if that helps.
This is why I always tell people to BACK UP before some thing happens DO NOT wait till some thing does happen. Do not back it up to an internal drive use external and remove it once done.
Look in the HDD directories and see if there is a Directory called Windows.old
If there is one then the files you want may be there. If not then you could try changing the extensions on some of the files and see if that helps.
This is why I always tell people to BACK UP before some thing happens DO NOT wait till some thing does happen. Do not back it up to an internal drive use external and remove it once done.
I have the files but somehow they changed from AVI or JPG to MXPCHYVL and I have no clue what this is or how to restore them (If this is still possible)
I was hoping that there would be some kind of recovery software for this or anything?
Look in the HDD directories and see if there is a Directory called Windows.old
If there is one then the files you want may be there. If not then you could try changing the extensions on some of the files and see if that helps.
This is why I always tell people to BACK UP before some thing happens DO NOT wait till some thing does happen. Do not back it up to an internal drive use external and remove it once done.
Okayโฆ i just found something strange
There was a text document called MXPCHYVL-DECRYPT so I opened it and it said thisโฆ
โ= GANDCRAB V5.1 =โ
UNDER NO CIRCUMSTANCES DO NOT DELETE THIS FILE, UNTIL ALL YOUR DATA IS RECOVERED
Code:
*****FAILING TO DO SO, WILL RESULT IN YOUR SYSTEM CORRUPTION, IF THERE ARE DECRYPTION ERRORS*****
Attention!
All your files, documents, photos, databases and other important files are encrypted and have the extension: .MXPCHYVL
The only method of recovering files is to purchase an unique private key. Only we can give you this key and only we can recover your files.
The server with your key is in a closed network TOR. You can get there by the following ways:
| 0. Download Tor browser - https://www.torproject.org/
| 1. Install Tor browser
| 2. Open Tor Browser
| 3. Open link in TOR browser: http://gandcrabmfe6mnef.onion/10ef0ed3a67a707d
| 4. Follow the instructions on this page
On our page you will see instructions on payment and get the opportunity to decrypt 1 file for free.
ATTENTION!
IN ORDER TO PREVENT DATA DAMAGE:
DO NOT MODIFY ENCRYPTED FILES
* DO NOT CHANGE DATA BELOW
(and some more bull crap)โฆ
Now this looks like a scam and I hope those links arenโt harmfull!
but does this tell you anything? because Iโve tried some recovery software and it didnโt do anything for me.
On that you would have to ask the Malware specialist they would be the best ones to assist on answering that.
From past experience yes most of those are scams yet they do encrypt the files and change the extensions and if there is any way to get them unencrypted they would know.
On that you would have to ask the Malware specialist they would be the best ones to assist on answering that.
From past experience yes most of those are scams yet they do encrypt the files and change the extensions and if there is any way to get them unencrypted they would know.
At least I know what actually happened to the files now.
Thanks for the help my man!
We process personal data about users of our site, through the use of cookies and other technologies, to deliver our services, personalize advertising, and to analyze site activity. We may share certain information about our users with our advertising and analytics partners. For additional details, refer to our Privacy Policy.
By clicking "I AGREE" below, you agree to our Privacy Policy and our personal data processing and cookie practices as described therein. You also acknowledge that this forum may be hosted outside your country and you consent to the collection, storage, and processing of your data in the country where this forum is hosted.
Tweet
Comment