info999 Posted February 17, 2019 Share Posted February 17, 2019 my Windows 2012 server got hacked, all files were encrypted (fortunately nothing important) What AV should I use to clean it ? Link to comment Share on other sites More sharing options...
Kalju Posted February 17, 2019 Share Posted February 17, 2019 If it is HDD, wipe drive, if SSD Trim. All partitions and then make all again. No antivirus will never help. Link to comment Share on other sites More sharing options...
The AchieVer Posted February 17, 2019 Share Posted February 17, 2019 1 hour ago, info999 said: What AV should I use to clean it ? None will help. Clean Install is the only resort. Regards Link to comment Share on other sites More sharing options...
coromonadalix Posted February 17, 2019 Share Posted February 17, 2019 The "nothing important" says it all, destroy any partitions, wipe disk / reformat, re-install Link to comment Share on other sites More sharing options...
kasper Posted February 17, 2019 Share Posted February 17, 2019 try this id-ransomware.malwarehunterteam.com/index.php Link to comment Share on other sites More sharing options...
Jogs Posted February 17, 2019 Share Posted February 17, 2019 What security soft were you using? Link to comment Share on other sites More sharing options...
lordi Posted February 27, 2019 Share Posted February 27, 2019 the safest way is reformat Link to comment Share on other sites More sharing options...
Kalju Posted February 27, 2019 Share Posted February 27, 2019 25 minutes ago, lordi said: the safest way is reformat It's true, formatting the hard drive is a bit more secure than simply deleting the files. Formatting a disk does not erase the data on the disk, only the address tables. ... All data stay there, so any a computer specialist is able to recover most or all the data that was on the disk before the reformat. Only the "high-level formatting" generates a new file system, but even this method isn't enough to destroy data permanently. And here is question - why You think, that it is "the safest way" like You said before? Link to comment Share on other sites More sharing options...
lordi Posted February 27, 2019 Share Posted February 27, 2019 1 minute ago, Kalju said: And here is question - why You think, that it is "the safest way" like You said before? yeah , just simple thought, ransomware mostly unrecoverable and dangerous , OP said that no important data reformat will be sufficient to get of rid of that and start from the scratch. oh maybe I forgot to add, after rebuild the system, add system protection like AV that have anti ransomware is mandatory Link to comment Share on other sites More sharing options...
Kalju Posted February 27, 2019 Share Posted February 27, 2019 Yes, formatting is recommended before new installation, but the best to erase all hard disk or partition is to overwrite all data with random data or with zeros, but it is possible only if it is HDD drive. If it is something else, for example SSD or something similar, simply delete all drive and then run Trim command and everything is done. After that do a quick format, this is enough. Link to comment Share on other sites More sharing options...
karimium Posted March 19, 2019 Share Posted March 19, 2019 Ransomware ? currently the only possible cure is full format. Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.