What is .YOUR_LAST_CHANCE extortion virus? What is YOUR_LAST_CHANCE extortion virus? If you can recover .YOUR_LAST_CHANCE encrypted files?
.YOUR_LAST_CHANCE suffix is the latest blackmail virus. It does this by .YOUR_LAST_CHANCE extension appended to the file to encrypt files, making it impossible to access. All encrypted files will receive the new extension as a secondary file. Prior to randomly generated, add another extension. The YOUR_LAST_CHANCE ransomware left blackmail, which makes how they can recover the alleged victims to their data instructions.
| name | Suffix .YOUR_LAST_CHANCE extortion virus |
| Types of | Extortion software, encryption virus |
| short introduction | Ransomware encrypts files on your computer system, and allegedly asked to pay a ransom to restore them. |
| symptom | The YOUR_LAST_CHANCE ransomware will extend to them through additional .YOUR_LAST_CHANCE, the new .YOUR_LAST_CHANCE extended to assist with a unique identification number encrypted file. |
| Allocation method | Spam e-mail attachments |
Suffix .YOUR_LAST_CHANCE extortion virus can spread its infection by payload manager, it starts this ransomware malicious scripts. The virus may also distribute its payload files on social media and file sharing services. Found on the Web can be displayed as a useful free software, you can hide the password virus malicious scripts.
YOUR_LAST_CHANCE or better known as .YOUR_LAST_CHANCE virus extortion is extortion software to encrypt your files and display extortion software, called _RESTORE FILES_.txt . You can see the following description:
In addition to the instructions that you can see in the figure above, contact the following email:
email: [email protected] or [email protected] or [email protected]
You should not pay any ransom money in any case.
Blackmailers want you to pay the ransom for the so-called recovery of files, like many ransomware viruses. . YOUR_LAST_CHANCE extortion virus extortion software to create entries in the Windows Registry in order to achieve lasting resistance, and can be activated or inhibited the process in the Windows system. All received encrypted . YOUR_LAST_CHANCE extensions and extension randomly generated. The extension is as an auxiliary files in each file looks like . YOUR_LAST_CHANCE . It can encrypt the audio, video, image and document files, backup data through extortion and bank software.
可以使用以下命令将.YOUR_LAST_CHANCE勒索病毒设置为从Windows操作系统中清除所有Shadow Volume Copies：
→vssadmin.exe delete shadows /all /Quiet
如果您的计算机设备感染了此勒索软件并且您的文件已被锁定，请继续阅读以了解如何将文件恢复正常。
如果您的计算机感染了.YOUR_LAST_CHANCE勒索病毒，您应该有一些删除恶意软件的经验。您应该尽快摆脱这种勒索软件，然后才有机会进一步传播并感染其他计算机。您应该删除勒索软件并按照下面提供的分步说明指南操作。
对于Windows XP，Vista和7系统：
1.删除所有CD和DVD，然后从“ 开始 ”菜单重新启动PC 。
2.选择以下两个选项之一：
- 对于具有单个操作系统的PC：在计算机重新启动期间出现第一个引导屏幕后，反复按“ F8 ”。如果Windows徽标出现在屏幕上，则必须再次重复相同的任务。
- 对于具有多个操作系统的PC：箭头键可帮助您选择您希望以安全模式启动的操作系统。按照单个操作系统所述，按“ F8 ”。
3.出现“ 高级启动选项 ”屏幕时，使用箭头键选择所需的安全模式选项。在进行选择时，按“ Enter ”。
4.使用管理员帐户登录计算机，当您的计算机处于安全模式时，屏幕的所有四个角都会出现“ 安全模式 ” 字样。
在较旧的Windows操作系统中，传统方法应该是有效的方法：
第1步:单击“ 开始菜单”图标（通常在左下角），然后选择“ 搜索”首选项。
第2步:出现搜索窗口后，从搜索助手框中选择“ 更多高级选项 ”。另一种方法是单击“ 所有文件和文件夹”。
第3步:之后，键入要查找的文件的名称，然后单击“搜索”按钮。这可能需要一些时间才能显示结果。如果您找到了恶意文件，可以通过右键单击来复制或打开其位置。现在，您应该能够在Windows上发现任何文件，只要它在您的硬盘驱动器上并且不通过特殊软件隐藏。
勒索软件感染和.YOUR_LAST_CHANCE文件病毒旨在使用加密算法加密您的文件，这可能非常难以解密。这就是为什么我们建议了几种可以帮助您绕过直接解密并尝试恢复文件的替代方法。请记住，这些方法可能不是100％有效，但也可能在不同情况下帮助您一点或多少。
Method 1: Use Data Recovery software sector scan driver.
Another way is to try to recover files through data recovery software to recover files. Here are some suggestions of choice for data recovery software solution:
Method 2: Try Kaspersky dongle.
If the first method does not work, we recommend trying to decrypt for other ransomware virus, the virus in case you become their variants.
Method 3: Use Shadow Explorer
To recover data in case of backup settings, use the following software to check shadow copies in Windows (if not already ransomware delete them) very important
Method 4: Find the decryption key in the password virus decryption key is sent over the network by sniffing tool.
Another method is to decrypt the file using a network sniffer acquires the encryption key, while the encrypted file on the system. Network sniffer is to monitor the data transmitted over the network program and / or device, such as its Internet traffic and Internet data packets, it may obtain information about the decryption key
Reproduced in: https: //blog.51cto.com/14258132/2408756