Ransom UYJH

[Mohammad522]

Hello 

The UYJH Ransom is a new and I see there is not a real solution for it neither by Kasper nor by any program antimalware or anti-ransom 

My pc got infected three days ago with an attack came outside ( online )  resulted in all my files got encrypted for example ( pdf.uyjh) 

I tried many programs, but I haven't got any good result yet. 

I formatted my PC twice 

I tested the disk C ( system ) many times and found it is not infected , though manually I tested it and noticed all hosts are clear 

I still use the same computer safely, but I never try to go inside the infected two partitions ( D \ E ) 

Is not a solution for such a malicious virus ? 

I heard that the combo cleaner is the best program, but sorrowfully it is not free. 

The matter I can't buy it online because I haven't any device for purchasing such as visa card or PayPal etc...

In my country ( Iraq ) or in my city Mosul there are not any governmental banks established yet. 

Please help 

Edited April 10, 2022 by Mohammad522

[Berny]

@Mohammad522  Welcome.

Please see → How to remove Ransomware from Windows & decrypt files

[Mohammad522]

11 minutes ago, Berny said:

@Mohammad522  Welcome.

Please see → How to remove Ransomware from Windows & decrypt files

I see it is a long topic and no practical solution  ???  Nonsense to follow 

I try the Kasper anti-ransom now, yet nothing comes good with me 

Edited April 10, 2022 by Mohammad522

[Mohammad522]

16 minutes ago, Berny said:

@Mohammad522  Welcome.

Please see → How to remove Ransomware from Windows & decrypt files

I see it is a long topic and no practical solution  ???  Nonsense to follow    The test is finished and nothing is captured  ???   Here is , so the tool does what   ? 

[Berny]

@Mohammad522 If you are using a  paid Kaspersky version you can eventually contact Kaspersky Technical Support

[harlan4096]

Also, did You have Kaspersky installed when You suffered the rsw attack?

 

Your system probably is not infected now, after the attack, most of this kind of malware does not remain in system, but all those encrypted files are not infected, are encrypted, so You can try to run many different antivirus and probably will not find anything.

 

What You need now it's a decrypt tool for that specific rsw variant, and this is very difficult to find, since this type of malware encrypt the files with a long bits' length private key.