Status
Not open for further replies.

Christo Digiloudis

Prominent
Aug 13, 2019
17
0
510
All of my files in a certain disk suddenly got a .cetori extension that makes them unusable that come with a _readme.txt which is a ransomware asking for 980 euros to get a decryption program which is definetely fake, I don't want the data in there to get lost because there are tons of family moments.
If you know how to fix that please tell me as soon as possible. Thanks..
 
Solution
This is specifically why we urge a good backup routine.

That readme is not a fake, your data IS encrypted.
You downloaded something that infected your PC. They want payment to give you the decryption key.
If you pay them, they may or may not give it to you.

There is a small chance you can recover without paying them.
Read here:
https://www.pcrisk.com/removal-guides/15679-cetori-ransomware

NOTE: Just removing the virus does not automagically decrypt your data.

R_1

Expert
Ambassador
I have no direct experience with this one but I did find this.
several methods described so you can try what you feel comfy with.
 

USAFRet

Titan
Moderator
This is specifically why we urge a good backup routine.

That readme is not a fake, your data IS encrypted.
You downloaded something that infected your PC. They want payment to give you the decryption key.
If you pay them, they may or may not give it to you.

There is a small chance you can recover without paying them.
Read here:
https://www.pcrisk.com/removal-guides/15679-cetori-ransomware

NOTE: Just removing the virus does not automagically decrypt your data.
 
Solution
Status
Not open for further replies.