The BullGuard products and services are part of NortonLifeLock Inc., a global leader in consumer Cyber Safety with a portofolio of brands including Norton, Avira and more. Learn more at

Ramsomware - CryptoLocker, Cryptowall, TorrentLocker, Petya, CBT-Locker

Posted 4/25/2016 6:07 AM
User avatar

Advanced member


If you are reading this it's likely you got the infection.

How did you get infected? Unfortunately, you opened the infection yourself, through an infected word document attached to an e-mail message, by downloading "torrents" from malicious links, by clicking on advertisements while browsing unsecured, by installing "fake" programs that promise to wrap your computer in gold. These things are designed to trick you.

Before anything else:

1. Take the computer out of your local network! If you have to get support online, then take all other devices off the network before you contact support. Some of these infections spread in the network.
2. If you did not run a full scan yet, with your security program, do it as soon as possible and better yet, scan in Safe Mode.
This guide shows how to access Safe Mode :
3. Get support as soon as possible. Don't let time pass before you seek help. The more you wait the higher the probability nothing can be done.
BullGuard provides 24/7 support for our users, included with their subscription.

If you are looking to beat the infection yourself, let me start by saying that the infection itself is not very hard to remove. Most full scans get rid of the infection. The problem these ransomware infections pose is that, once they do somehow get to run on your computer and encrypt files, the files are lost. There is no getting them back by decrypting them. It's hard, if not impossible to decrypt the files, even with the right tools and skills.

What CAN you do about the files that are encrypted?

One is to be responsible and keep a backup (or two) of your important files. Nowadays, external hard drives and cloud backup solutions are cheap and easy to use. Note that you need only consider backing up personal data, like work documents, pictures, movies, e-mails and anything else you can't replace/recover. You can recover Windows with the disk and you can reinstall programs from their developers so you should not worry about those.

If you don't have a backup of your files, you can try to get the files back (at least a part of them if not all):

1. By either accessing the Shadow Volume Copies (a good method is to use Shadow Explorer for this), if you had System Restore working on your computer properly and regularly, before the infection reached your computer.
2. Or you can try using R-Studio Data Recovery Software to recover the data.

If you are interested to know more about these infections there are a lot of very well written articles, so I will not repeat them. You can start from here
Andreea-Luciana Ostache
Support Team Leader

Download the Free Trial version of BullGuard Internet Security 16

You have a BullGuard related problem? Post your question on these forums, contact Support or contact me on Twitter!
Posted 8/25/2016 12:35 PM
User avatar

NorthPole Advanced member

Date Joined Nov 2016
Total Posts: 176
  • Unread posts or replies
  • No unread posts or replies
  • Unread Posts (Read Only Forum)
  • No Unread Posts (Read Only Forum)

Forum Information

Currently it is Wednesday, August 10, 2022, 12:46 AM (GMT +2)
There are a total of 61,974 posts in 13,697 threads.
In the last 3 days there were 0 new threads and 0 reply posts.

Who's online

This forum has 38,573 registered members. Please welcome our newest member, iAwake.
36 Guest(s), 0 Registered Member(s) are currently online.