I accidentally interacted with a ransomware program that "encrypted" many of my files. I managed to remove the malware using multiple scans with Malwarebytes (premium version). However, I've noticed that my PDF files have had their extensions changed, yet I can still open them in Edge. Is this normal? Also, is there any reliable software to ensure that I've completely removed the ransomware? Just as a side note, the ransomware created several text files in various folders, and the files are named after my computer. The text leads to a Tor site.
2 Answers
If you've had something that alters file extensions and drops files, the safest course is usually to format your system and reinstall the operating system. It's a hassle, but it ensures that no remnants of the ransomware remain.
It's unlikely you'll find a program that can specifically reverse the effects of this particular virus unless it's created by the malware itself. However, if you're looking to change the file types back, you can use PowerShell with a command like this: `cd "C:pathtoyourfolder"` then `Get-ChildItem -Filter *.pdm -Recurse | Rename-Item -NewName { $_.Name -replace '.pdm$','.pdf' } -WhatIf`. Just make sure to change `.pdm` to whatever your files were renamed to. Test it in a small folder first to avoid messing things up!
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures