Hello, my PC was attacked my MSOP ransomware and all files are encrypted. How can I remove the virus and restore encrypted data? Thanks.
Dear visitor,
MSOP is a very new ransomware version that originates from STOP/DJVU ransomware family. Currently there are no ways to restore files without paying a ransom. However, if you are subject to the offline key encryption, you might succeed in decrypting your files in the future. See this guide here.
To identify whether your files were locked by online or offline key, go to C:\ SystemID\ and look for PersonalID.txt file. Open it and check if the personal ID ends with t1. It is an indicator of offline encryption. Otherwise, chances to recover files are very, very low.
Please read this guide about removing MSOP ransomware here.
Regards,
Norbert