Hi Team,

I’ve noticed that my laptop was attacked by ransomware with .VVEW extensions as title describes. Story: I left my laptop with 2 - x2TB Hard disks on for a hefty copy task overnight on a fine day in September 2022. next day both my hardisks & laptop with all the files in it were found to be encrypted with .vvew extension. I checked with my friend who’s working in Cybersecurity, he said this is online encryption cannot be decrypted with an offline key. A local repair shop confirmed the same.

I found 1 repair companies who could decrypt it, but was charging hefty fees, 150$ per file. which is not at all economical. I’ve formatted my Laptop with nearest Lenovo center. I’ve formatted one 2TB hard disk which has some games & movies in it, not so important stuff so that’s okay as well.

The other 2TB hard disk has some really important stuff in it, Lot of my 4-5 years of work.

Tried Emsisoft, But i dint find a relevant software to decrypt it. internet didnt help either.

Is there any chance that anyone could help me with decrypting the last & only hard disk left. I kept the hard disk in a secure location, I know connecting that to any laptop would spread the virus around. Thanks in advance.

  • BigCatSanctuaryB
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 year ago

    The ransomware guide linked by AutoMod is the best advice we have.

    If this random repair shop actually does have a solution for the particular encryption (which usually involves police kicking down a door a seizing the scumbag’s computers to find the key), they have an ethical responsibility to release it publicly for the benefit of all victims and to cripple this attacker’s scheme. More likely: they’re full of it.

    I’m afraid all you can do is wait to see if a decryptor is published. Otherwise, it’s time to use your backups. No backups? I’m afraid you’ve just learned the lesson.

    • SnooFoxes3176OPB
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 year ago

      I’ve gone through AutoMod’s advice as well, unfortunately there’s no decryptor for .vvew yet. I was in Mumbai, India when the attack happened, unfortunately police & cyber security department are exhausted or they simply don’t care about such issues to punish these criminals.
      I had 2 HDD’s 1 of them i’ve formatted since there’s no important data in it, the other one does have important data, and so i kept it as it is, disconnected & stored well, this has to be recovered.

      I had no back up of the data, never expect something to go bad to such an extent, so never backed it up. I’ve learned my lesson hardest possible way, so I’m using onedrive with 1 hard disc back up at the moment, however i’m on the wait for the decryption software to be released so i can recover the hard disk.