Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Question

Hit with virus - anyway to recover my files?

Dec 2, 2018 2:22AM PST

After installing a software on my computer it end up with a bunch of malware's and Trojans corrupting almost all of my files with ending eg.jpg.wrmjql.
I tried scans with malwarebytes zemana hitmanpro avg but still everything is there. Is there anyway to recover my files and make a clean installation of windows?

Note: Subject line was edited by forum admin for clarity

Post was last edited on December 5, 2018 3:46 PM PST

Discussion is locked

- Collapse -
Answer
Re: virus
Dec 2, 2018 2:40AM PST

The usual thing in such a case:
1. Reset Windows 10 or do a clean install from the Windows 10 installation disc or stick (free to make from https://www.microsoft.com/en-us/software-download/windows10 )
2. Restore your data from your backup.

People who forgot to backup usually lose a lot of their data.

From what site did you download that "a software"? Please tell, so our members reading it are warned to never use that site.
And what antivirus are you using? Didn't that warn you either during the install or when that malware started doing its ugly work?

- Collapse -
Virus
Dec 2, 2018 2:49AM PST

Have already made a reset with keeping all my files but they have this ending .wrmjql again. I google this and returns me nothing. It is a new virus I don't know. I installed kms pico for an activation and about the antivirus I used I gave info in my opening post

- Collapse -
Re: virus
Dec 2, 2018 3:51AM PST

- How do you mean "again"? Resetting Windows doesn't change filenames.
- Instead of using KMS Pico better use Microsofts own activation codes (which aren't free) in the future.
- Did you run realtime AVG antivirus when you downloaded and used KMS Pico?

- Collapse -
Virus
Dec 2, 2018 4:10AM PST

Bro do you have any solution to my problem? I don't think we are going somewhere with this discussion. No offense

I am looking to make my files working again. I have them on my pc but with this ending .wrmjql and I cant open them.

Any ideas for the problem would be usefull. What has be done cant be change. What can I do now

- Collapse -
Re: problem
Dec 2, 2018 4:34AM PST

First be sure there is no more virus on your PC.
Then, as I wrote above: . Restore your data from your backup. People who forgot to backup usually lose a lot of their data when malware encodes it.

All you can do: rename them to what they were and see if you can open them then. But that's really very doubtful.
If you happen to know the name of the ransomware that did this, it might be possible to find a way of decoding them again. And if that malware asks you to pay for decoding: it's kind of risky to do that, because there is no guarantee at all it works. Then you not only lost the data but the money also.

- Collapse -
KMS Pico is a problem. wrmjql sounds like RANSOMWARE
Dec 2, 2018 8:32AM PST

I've seen/heard folk deny it but some are infected so hey, go ahead but there is no support from Microsoft about that or just about any forum.

But .wrmjql sounds like RANSOMWARE damage. As long as you pirate you run the risk of getting an infected KMS Pico with ransomware that encrypts your files and sometimes demands payment to decrypt.

I read you want your files back so you find what RAMSOMWARE it is and research if there is a free decrypter. Sometimes there is, most of the time the files are gone forever.

-> THIS IS NOT A VIRUS. It's RANSOMWARE that you or someone installed, ran (like KMS Pico) and were stung. I usually find such folk throw a tantrum over this.

Post was last edited on December 2, 2018 8:36 AM PST