Am I fucked?

many ransomwares are scams, and do not actually encrypt your files (russians are lazy)
do some research on the particular one you're experiencing and try to see if it's legit

usually they're not worth paying. if that picture is the message you're seeing they want $500

>>308386
I started by looking up ThunderCrypt and it has very little on it. RSA-2048 is used in a lot of these apparentley but there seems to be a lot of methods of removing it I'll just have to try them all and see if one works

I wasn't going to pay but what do I do then? just remove ThunderCrypt from my PC and remove my files?

>>308384
download malware bytes

You can remove the infection but it's pretty unlikely you'll be able to get your files back

>>308384
copy the key before running malware bytes

follow this http://www.wintips.org/how-to-remove-cryptodefense-virus-restore-cryptodefense-files/

>>308384
I worked on a pc that caught that one time, I could remove the infection but couldnt recover all the files, also had to reinstall microsoft office, might as well format the whole pc

Might I ask how do you think you caught that? I never actually knew how the person who used that pc got it, I just assumed it was some tech impaired shit, clicking on something you shouldnt or downloading something from an email you shouldnt

Your files are never worth it.
Next time remember to back up anything you can't afford to lose.

>>308388
removing the virus is pretty easy but you won't get any data back. before you delete files I would recommend checking to see if they're actually encrypted. some ransomware has been known to only encrypt filenames, or just hide them from you, or limit access, things that you might be able to check in safe mode or off a linux live CD or whatever you want

File: win.png (91KB, 1200x1125px) Image search: [Google]

91KB, 1200x1125px

>>308384
>windows
ayy lmao

Thanks for the help lads. The files are encrypted I think I'll just have to format.
>>308394
None of that worked, in fact MalwareBytes hasn't even recognised it as a threat
>>308397
Honestly I have no idea and I'm not being cagey or nothing. All of my history are your standard websites. I have downloaded keygens and stuff before so I don't know if that's related.
>>308398
A lot of these files I have on my old harddrive I'll just have to dig it up.
>>308407
I fell for the Windows meme

>>308384

As a warning to the rest of us, OP, what were you *doing* to get infected with ransomware? I run Win7 and AVG to look at teh pr0n and have never gotten a virus.

P.S.: You gotten a lot of good info. But there's also this: some ransomware uses a shit encryption algorithm, and it may be possible to recover your data once you know what variant you've got. Good luck!

>>308427
All I was doing was sending shitty Youtube videos over Discord that's all I was doing, Not looking at pornses. Running Windows 7 and MalwareBytes. I'm going to keep looking into it but it's not lookign too good. Thanks for the tip though

>>308427
this
>>308423
i've only seen 14 yrs getting ransomware'd, what were you downloading? also did it encrypted the entire drive? did you lose something valuable? if you deleted a copy recently perhaps you can restore with getdataback

>>308435
Last thing I downloaded was Duck Game for Steam I'm not looking for the hottest dark web files. I genuinely don't know how I got it.

Yeah it encrypted the entire drive

File: shh.jpg (31KB, 480x288px) Image search: [Google]

31KB, 480x288px

>>308438
>it encrypted the entire drive
Mother pus bucket.

>>308423
there's no guarantee they'd send you the key even if you paid. there's no guarantee the key would work. their business model relies on people needing their files back so badly that they panic and send money.