How to fix ransom with ".onelock" extension

Question

Hello all,

My server has been attacked by Ransomware, all my files has been encrypted,

".onelock" is the extension that shows on files, doc, media and images file.

unfortunately, we don't have backup for all files,

is there a way to decrypt it?

Answer 1

You can save these files first and then try to decrypt them according to the link below. But, as you know, the chances of us succeeding are slim.

decrypt-files

Answer 2

I'm sad to inform you that you are screwed, unfortunately. The only thing that in theory can work for you (though not guaranteed) -- communicate with ransom owners and pay them if you think the data worth requested price. In general, think that your data is lost forever. It is a tough lesson you have to learn. Now you can realize how backup is important and literally can save your life.

Either way, you may visit https://www.nomoreransom.org/ portal that offers some decryption tools for known ransoms. No guarantees.

Answer 3

Hello there,

Basically encrypted data can only be read or processed after it has been decrypted, using a decryption key or password. Only the sender and the recipient of the data should have access to the decryption key.

There are many online free tools to decrypt the data and you can try them but I highly doubt the effectively of these tools if you do not have the back only way is to clean install the PC and make sure this does not repeat.

--------------------------------------------------------------------------------------------------

--If the reply is helpful, please Upvote and Accept it as an answer–