Recovering from Crypto Viruses and Other Ransomware
- This article is for Windows only
CryptoLocker / Crypto Virus is a powerful virus designed to extort money from unsuspecting victims. This virus locks the files on your computer through encryption and holds them for ransom unless you pay a fee to unlock them.
- If your computer is backed up with Carbonite and you suspect it might be infected by a virus or ransomware, do not pay the ransom. Carbonite can help you restore clean versions of your infected files. Our ransomware recovery team is available Monday - Friday from 9:00am to 7:30pm, and Saturday 9:00am to 5:30pm ET.
The sections below are collapsed. Please click a section title to open / close the appropriate section.
If you have the CryptoLocker / Crypto Virus on your computer, a pop-up like the one below will appear and report that your files are locked.
CryptoVirus also locks and modifies the files, which prevents you from opening or accessing them.
If both symptoms are appearing on your computer, it is very likely that your computer is infected with ransomware.
If you have suffered from the CryptoLocker virus and need to restore your files, you will need to contact Carbonite Customer Care for further assistance. However, you should follow these steps beforehand to perform a successful recovery:
- If you can still operate the infected computer, enter Recover Mode or uninstall Carbonite to protect your backup.
- Remove the virus from your computer. Restoring clean files from Carbonite does not remove the virus and could potentially make the virus spread further.
- If you would like assistance with removing the virus, please contact our partner Support.com at 1-866-314-1159.
- Ensure you have access to the original or replacement computer and contact Customer Care for a specialist to start a restore of your data.
- Crypto-Recovery Team Hours: Monday - Friday from 9:00am to 7:30pm, and Saturday 9:00am to 5:30pm ET.