0

I have some problems with Windows XP. After scanning the whole file system with anti-virus program, each and every file got an extension ".lwsdnrl" ? Even if I try to open the file with the appropriate program, it fails. For example, a file called "myFile.pdf" got converted to "myFile.PDF.lwsdnrl". In addition on every file when you click on properties there is the following text : "This file came from another computer and might be blocked" and an "unblock" button. However, I found out how to unblock all files globally, bit still they look damaged and can not be opened. For example:

  • openning PDF file fails with error, saying the file is of unrecognized type or it is damaged
  • openning .doc file just fails
  • openning .xls file succeeds but just a meaningless sequence of symbols is shown on the screen
  • openning .jpeg file says "no preview available"

I read about Microsoft streams and executed:

streams -s -d *.*

in folders with damaged files and a lot of streams were deleted, but that didn't help

Any help how to restore my information will be appreciated. Thanks.

  • 1
    What anti-virus program was it? – Randy Orrison Feb 1 '15 at 13:33
  • It was eset NOD 32 – egelev Feb 1 '15 at 14:13
  • 2
    What was the reason to scan your system with a virusscanner? The reason I am asking, is because it sounds you have a randsom virus on your system, that converted all your files, and the virus scan was ran after and you only then noticed it. If this is the case, you cannot get these files back and you have to resort on your backups. Also, you should definitely upgrade to a more modern OS because windows XP has too many security holes so getting a virus infection will happen sooner or later. – LPChip Feb 1 '15 at 14:15
  • opened .cab file attached to email from trusted user – egelev Feb 1 '15 at 14:21
  • 1
    then tell the 'trusted user' he's being used as part of a botnet & hope he's not also still on XP – Tetsujin Feb 1 '15 at 19:01
3

You are victim of ransomware. And based on the contemporary situation with this software you can do two things:

  1. pay the ransom and pray you will get the private key to decode the files
  2. restore from backup/forget about these files
  • 1
    I never understood ransomware. What incentive do criminals have to restore your files after you give them money. Maybe for the scam to work, you have to do it so the next victim can you will be an honorable criminal. WTF right? – Sun Feb 3 '15 at 17:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.