r/computerviruses • • Sep 02 '26

Disinfection Help I paid ransomware

Post image

I paid this ransomware because my grandma's will is on here and I need it. How long does it take to get my files back? I'm waiting for the virus to delete itself now that I paid and I need the files back already. What should I do

285 Upvotes

264 comments sorted by

153

u/KyloNeko Sep 02 '26

Oh no, you got double scammed

9

u/Fast_Brain2982 Sep 02 '26

đŸ˜„đŸ˜„

10

u/[deleted] Sep 03 '26

[removed] — view removed comment

1

u/computerviruses-ModTeam Sep 07 '26

Your post was removed because it is a personal attack on someone else or a group of users. Please be civilized. Please make sure to read and follow https://www.reddit.com/r/computerviruses/about/rules

232

u/Stalkyh Sep 02 '26

I love how there is icon called "roblox hacks no virus" on the desktop... I wonder what happened /s

48

u/wakanakisarazu Sep 02 '26

That icon is sending me lmao

11

u/GNF54 Sep 02 '26

Environmental story telling

3

u/Key_Clock8669 Sep 02 '26

just imagine

2

u/SkyMist0 Sep 02 '26

lmao i send award for you

1

u/ommarcito Sep 03 '26

r/technicallythetruth since it prolly wasnt a virus lol

1

u/Any_Mortgage_9890 Sep 07 '26

Reminds me of how internet used to be. Someone telling you they have the latest linkin park song and sending in_the_end.exe

→ More replies (34)

71

u/Key_Clock8669 Sep 02 '26

you got scammed, theres ways to recover those files for free, altought pretty complex ones, just let a professional try to recover your data

and yeah, scammed in the way that you paid for absolutely nothing

→ More replies (7)

60

u/WorldWarrior428 Sep 02 '26

This has to be a joke.

If not, I pity you. That money is gone. Its literally a random scam virus. Thats what they do. Steal money. They NEVER give back the pc

-6

u/Fast_Brain2982 Sep 02 '26

Why is everyone saying this is a joke, I paid it and I'm waiting. Is this not common?

47

u/[deleted] Sep 02 '26

[removed] — view removed comment

0

u/Fast_Brain2982 Sep 02 '26

Oh

8

u/SkyMist0 Sep 02 '26

Do you know the ransomware name?

→ More replies (6)

-3

u/Charliemingay Sep 02 '26

Try a windows defender scan?

10

u/Ysfaliarslan Sep 02 '26

all files are literally encrypted, how should a windows defender scan help?

3

u/Fast_Brain2982 Sep 02 '26

I open it and then it closes itself, same for task manager and cmd

3

u/Charliemingay Sep 02 '26

Oh that’s a pretty bad ransomware innit, would recommend you take it to a professional.. and quick

1

u/[deleted] Sep 02 '26

[removed] — view removed comment

5

u/randomdude2527 Sep 02 '26

As much as i think op is a dumbass or karma farmer, he was on r/nicotine the other day.

→ More replies (1)

2

u/Fast_Brain2982 Sep 02 '26

Why is everyone saying I am a child???

16

u/[deleted] Sep 02 '26

[removed] — view removed comment

→ More replies (3)

7

u/aSwarmOfGoats Sep 02 '26

Because five hours ago you were bragging about knowing a Roblox exploit, complaining about your “x-box being hacked” and complained about taking too much nicotine for the first time.

You type like a preteen; you’re acting like a child and complaint when people assume as much.

→ More replies (1)

1

u/aSwarmOfGoats Sep 03 '26

" I just wanted infinite money in Rainbow Tung Tung Tycoon because the mega dropper costs way too much real money and my parents won't buy it for me."

Read every part of that sentence, out loud, a few times. That's exactly why.

9

u/Apt-Fee Sep 02 '26

They lied to you buddy

5

u/Track-on-the-side Sep 02 '26

Yes, they make you pay for it for nothing. They never give it back.

3

u/General_Priority_386 Sep 02 '26

And they will keep asking for more money

2

u/usernotfoundplstry Sep 03 '26

People think it’s a joke because of how absurd it is that you got scammed by these guys, PAID THEM, and then you think they’re going to give you access to your computer again. It’s so absurd that people here think you’re trolling.

Does that help explain it? Certainly not trying to be rude, just trying to explain because you seem mystified by people thinking you’re trolling

1

u/Hidie2424 Sep 03 '26

Ransomware is kinda uncommon, but paying it is even more uncommon.

Just think, someone spreading ransomware has no obligation to remove it once you pay. You already paid, they ain't going to remove it. You can hope they will but I doubt it.

1

u/WorldWarrior428 Sep 03 '26

No, most people know it's a complete scam and you'll never get the money or the pc back

122

u/-Ilovepokemon- Sep 02 '26

you got scammed buddy.

→ More replies (8)

29

u/ikakindiehoes Sep 02 '26

Roblox hack no virus xD

8

u/Firm_School_5708 Sep 02 '26

Yea totally not a virus guys, it says so in the name

30

u/Sci_Fried_Chicken Sep 02 '26

Well uhh sorry to break it to you, but if it actually would have deactivated itself it should have done it basically immediately.

So you just got scammed.

Sorry to say it

49

u/LuxuryFedora Sep 02 '26

No way this is not joke

→ More replies (2)

19

u/LupusHouseMD Sep 02 '26

You forgot the /j

1

u/Fast_Brain2982 Sep 02 '26

?

14

u/LupusHouseMD Sep 02 '26

You have learned a big lesson not to download sketchy roblox hacks. Contact your bank to try and stop the charge.

2

u/Fast_Brain2982 Sep 02 '26

I gave them the money in gift cards so they don't have my bank details

23

u/LupusHouseMD Sep 02 '26

It's a $250 lesson for you then.

6

u/Chocobo7777777 Sep 02 '26

You grow from mistakes. Especially from really dumb mistakes like this one. Think with your head next time you’re downloading sketchy stuff off the Internet kid

1

u/danviii Sep 04 '26

Gift cards? OP is definitely a child😭

16

u/lOmaine777 Sep 02 '26

unskippable title

12

u/Binary101000 Sep 02 '26

250 USD is very low for a ransom.

3

u/2ewka Sep 02 '26

Not for a PC

13

u/SpankThePork Sep 02 '26

This is wild if OP is serious.

11

u/[deleted] Sep 02 '26

[removed] — view removed comment

→ More replies (4)

13

u/wheezycunt Sep 02 '26

So many people being baited here

Picture called private email

.txt labeled important

Literally a folder called money

Nobody has these kinds of files on their desktop without having a million other random things

2

u/imchococaw Sep 08 '26

Just check his profile, he posted before that he has 7 laptops and he’s a full time discord moderator. So of course a moderator ain’t gonna fall for these typa scam lol

8

u/[deleted] Sep 02 '26

[removed] — view removed comment

3

u/FearlessFold6912 Sep 03 '26

Dude check OPs post history. This is real 😭

5

u/sniomii Sep 02 '26

Kiss your grandma's will goodbye.
on a sidenote, Wills are written and saved legally, the copy you have isn't the only one, see where she wrote it, who signed it, who witnessed it etc

5

u/NyteTro Sep 02 '26

Look at this guy's comment history, filled with comments in Roblox hacking communities and similar sketchy websites and subreddits. Bro got what he had coming to him I guess.

5

u/sheepiearts Sep 02 '26

"Money" LMFAOOOOOOOOOO nice

3

u/Fast_Brain2982 Sep 02 '26

What

3

u/sheepiearts Sep 02 '26

I genuinely don't know if you are trolling. If not, I'm sorry. For future reference though I would not keep super important stuff on the desktop or even on your computer locally if you can help it. And I wouldn't download roblox cheats again.

3

u/Gaming-ninja Sep 02 '26

Dang he got scammed

3

u/Comfortable-Pace-123 Sep 02 '26

Ransomware is always a scam. They never intended to give you back access. They just want your money. But since you already paid, I guess all you can do is wait. Please tell us if the issue is resolved.

3

u/Emotional-Art2113 Sep 02 '26

Turn the computer completely off, unplug everything, and take it to geek squad or similar. Do it immediately if you want any hope of saving anything that could be left. And learn better security hygeine. Learn to be less gullible/trusting on the internet. Dont click/download sketchy stuff.

3

u/RedditIsAJokeLMAO69 Sep 02 '26

I bet you would delete system 32 if u were told it would get ur files backđŸ€Šâ€â™€ïž

2

u/robomikel Sep 02 '26

The threat actors are usually unlock the files after paying because they want people to pay. Like a Busisness. Although, that’s from big companies. Not sure about single computers. They usually leave an email for some kind of support. Since I don’t see one I would be concerned

1

u/VoidHarrier Sep 02 '26 edited Sep 02 '26

Depends on what the actual malware is. Could be a wiper that lulls the user into having a sense of hope by paying, so it could be something closer to NotPetya than Wannacry.

ETA: Also, they may only unlock if they can determine that OP paid and depending on how it routes it may be hard for them to tell. Coding the unlock into the client side sounds like something they may avoid to make it harder for the user to unlock it on their own.

2

u/nOAH_aXEL Sep 02 '26

Cracks de jogos, apks, bots, coisas q parecem até simples, aquele facilitador, dinheiro naquele jogo que exige microtransaçÔes. Em geral tem vírus ainda que nao seja um que te ferrei completamente.

→ More replies (4)

2

u/Chahier Sep 02 '26

I'm pretty sure this is some kid who fell for a Roblox scam. No way someone old enough to need a will is this dense.

2

u/meletiondreams Sep 02 '26

saw the obvious satire Roblox virus and poorly made tkinter app

this def satire

you said "they were all libs" in your profile you asked randoms for roblox cheats in your profile you have no copies of a will

maybe it's not satire...

on a serious note all your shit is gone wipe all your partitions and reinstall windows

1

u/meletiondreams Sep 02 '26

actually sell your PC and get a Chromebook and a console

2

u/miss-zenki Sep 02 '26

Ooft. How old are you? You need to tell your parents to take the computer to a professional to try and get the files back. And get them to call the bank to reverse the charge.

2

u/Throwaway1293524 Sep 02 '26

Thank you Reddit for randomly recommending me this post, this shit is gold

2

u/[deleted] Sep 02 '26

[removed] — view removed comment

2

u/lori11221 Sep 03 '26

I thought it encrypted everything so why dose Chrome and all of them still have icons are u sure it's real

2

u/HuntEnvironmental252 Sep 03 '26

theres no way you didnt have your GRANDMOTHER'S WILL on other places or printed out idk why you expected your files to be given back from paying them lol

2

u/Suspicious-Trash-851 Sep 03 '26

I'm having a hard time deciding if this guys trolling or if he's a kid who downloaded fake roblox hacks and got scammed, cuz if you go back into his post history, he has a post on r/Nicotine about if 50 mg of snus is a lot.

2

u/Time_Chicken_5912 Sep 03 '26

Most of the time you’ll never get your data back when you pay the ransom. Really sorry you got scammed twice.

1

u/SkyMist0 Sep 02 '26 edited Sep 02 '26

İm sorry but this scam. but you can still try to decrypt the files.

Whats is the ransomware name?

1

u/Freeze-Ya-Boy Sep 02 '26

It's already encrypted, so it wouldn't help, plus it's not available in the US (if op is in the US)

3

u/Track-on-the-side Sep 02 '26

encryption keys are sometimes found, try something like https://www.nomoreransom.org/

1

u/Freeze-Ya-Boy Sep 02 '26

u/SkyMist0 edited his comment; it originally was recommending Free Kaspersky Anti-Ransomware Tool | Kaspersky to OP

1

u/SkyMist0 Sep 02 '26

But i think this ransomware looks like easy to decrypt.

1

u/Freeze-Ya-Boy Sep 02 '26

u/SkyMist0 edited his comment; it originally was recommending Free Kaspersky Anti-Ransomware Tool | Kaspersky to OP

1

u/nOAH_aXEL Sep 02 '26

Meus parabéns! Eu lembro quando foi a primeira vez q eu peguei um desses e muitas vezes, formatar nao vai te ajudar em nada! Foi baixando p0rn0 ou jogo pir4ta?

2

u/Ysfaliarslan Sep 02 '26

formatting won't help you at all

If you completely format it it will work again but all data will be gone. Atleast it fixes it.

2

u/nOAH_aXEL Sep 03 '26

NĂŁo necessariamente, existem vĂ­rus que corrompem a BIOS do computador, ele vai parecer estar funcionando ate o hacker querer refazer o q ele ja tinha feito. Se eu nao me engano o nome desse tipo de vĂ­rus Ă© rootkit.

1

u/Empuda Sep 02 '26

Every scammer is different. The "good" scammers, like to set up call centers for support. Guess this is no the case here. Best of luck! But you can probably call the lawyer and get another copy if cheaper.. or if she has passed, might be in the court system.

1

u/nOAH_aXEL Sep 02 '26

O dinheiro q vc vai pagar (por favor não pague eles claramente nao tem a intenção de te devolver nada) era o q vc podia usar comprando o q vc queria.

1

u/MissSharkyShark Sep 02 '26

Yeah you got scammed. NEVER pay ransoms. If you can get the type of ransomware identified, then you MAY get lucky if there exists a decryption key for it. Otherwise, you can say goodbye to every single file on that machine.

This is why you ALWAYS keeps backups, and NEVER try to download hacks and cheats. Game hacks are almost always malware. Lesson learned, time to find out if there’s other copies of that will somewhere else.

1

u/icesnake200 Sep 02 '26

Actually curious to see what happens when a guy actually pays up their malware blackmailers.

2

u/Aromatic_Law_1939 Sep 03 '26

Nothing. You get a dumb streak x2 for paying them. You still have the ransomware. This is why you don't negotiate with terrorists

1

u/Ysfaliarslan Sep 02 '26

Waiting won't help. Everything is gone. Next time don't install files without making a virus scan. You have to completely wipe you drives. And there is no thing called free robux glitch. How did you even fall for that 💔

1

u/[deleted] Sep 02 '26

[removed] — view removed comment

1

u/TrueSgtMonkey Sep 02 '26

The question should have been asked before you paid. That sucks though. Sorry this happened. Follow what other comments are saying and take it to someone

Edit: After thinking about it some more and reading other comments, I do hope you are joking here haha

1

u/[deleted] Sep 02 '26

[removed] — view removed comment

1

u/CaptainPhreak Sep 02 '26

OP if you're not trolling, you got ripped off.

Format your PC, or take your PC to a professional.

1

u/AskEnvironmental4378 Sep 02 '26

Bruh, roblox hacks no virus? This is a 100% a joke or a troll. If this is somehow real, I'm guessing you're a kid or something.

1

u/RestlessEnui Sep 02 '26

Wish this automatically happened to everyone trying to cheat on a game tbh

1

u/Big_Banana_3867 Sep 02 '26

this gotta be fake lmao wdym roblox hack no virus, money and private email image

1

u/erm_idk_tbh_ Sep 02 '26

tell your parents to take your PC to a PC repair shop that socializes in these things, as soon as possible. tell them the whole truth, even if you get grounded. this mistake is on you and you should take it and learn a lesson from it. your money is gone, and there's a high chance that all of your files are gone too. don't play with things you're not faimilar with.

1

u/[deleted] Sep 02 '26

[removed] — view removed comment

1

u/Ok_Umpire6384 Sep 02 '26

You seriously think you got your files back?

1

u/ModernNomad97 Sep 02 '26

Serious question, are you like 10 years old?

1

u/RazzmatazzUnusual843 Sep 02 '26

Lesson learned: Any ransomware infected PC should be considered completely compromised and drive fully wiped on a different machine. You will not get your files back, once the ransomware starts it is over.

1

u/VegetationMutation Sep 02 '26

Uhh did u click the i have paid button

1

u/TroubleStrict763 Sep 02 '26

You can’t trust stuff like that. Take it to a professional and install a proper antivirus program. The “Roblox hacks” may as well actually have been a virus. It’s why I don’t run stuff like that. It’s misleading.

You may as well have been scammed.

1

u/Mean-Potential-3478 Sep 02 '26

you paid a scammerâ€ŠđŸ«©

1

u/INfusion2419 Sep 02 '26

"Damn i wonder where all the users important files are" stupidly large folder named MONEY pops up on the desktop

1

u/mkenn723 Sep 02 '26

Did you check to see if they really did encrypt your files?

1

u/Fast_Brain2982 Sep 03 '26

Yes it's all in Chinese and emojis

1

u/TH3_OG_JUJUBE Sep 02 '26

Environmental storytelling 😭

1

u/Galaxys8pro Sep 02 '26

Please tell me you're joking.

1

u/jr23160 Sep 02 '26

How about not storing things like a will in one location. That should be held in a bank lock box in print and a flash drive and or a external hard drive. Any important files I have on 2 different computers one hosted at my house and one hosted at my brother's house and he sends his files here and vice versa. Also don't install random files from the Internet for hacks. Without knowing more about the virus you have its hard to say how easy it is to by pass. For ransomware its hard to say if someone will actually provide the key for you. I know some hacker groups have a master key that may be available as a backdoor and it may be available for people to find as they are sometimes leaked.

Overall your the reason schools and company's super restrict people using computers. Please learn about proper data protection, in this case it's a virus but what if it was a fire that destroyed the computer. This might end up being a learning experience.

1

u/heinzketcp Sep 02 '26

Grandma likes Roblox hacks with no virus

1

u/ABlack2077 Sep 02 '26

Sorry this happened to you, (wo)man. I work in IT, to keep it vague, and chronically online people always expect you to be sharp about situations like this.

Let this be a lesson, and like I said, sorry this happened.

1

u/ilove_whitebois Sep 02 '26

You should’ve spend that money on Robux instead of paying to this ransom ware

1

u/Greenhawk444 Sep 02 '26

There’s only one copy of the will?

1

u/ice-entia Sep 03 '26

u ain’t getting em back dawg

1

u/B4DM4N12Z Sep 03 '26

Roblox Hacks? I wonder how this ransom ware happened?

1

u/ImVrSmrt Sep 03 '26

Seek help with data recovery (if that's even possible). You really needed to go get help for this ASAP and not wait. Paying the ransom is both not a good idea and perpetuates this tactic. Take is as a lesson learned and move on.

1

u/greaterdoom3r Sep 03 '26

Dude, can’t yall tell OP is trolling

1

u/deepv2__ Sep 03 '26

oh my god its a tkinter python ui

yeah you got hacked AND scammed by some skid, sorry for you dud

1

u/Fast_Brain2982 Sep 03 '26

What is tkinter

1

u/deepv2__ Sep 03 '26

simple python lib to make interfaces

its fairly easy to use if you know python, making the ransomwares made with this spread easily as th ere's lots of them

1

u/Iam_best_dev Sep 03 '26

wait I thought this was a joke but you actually paid for it and installed Roblox hacks?

Contact a professional. Depending on how shitty the ransomware is you can recover the data so better start praying and if it's a good ransomware well then unfortunately you will likely need to say goodbye to those files

1

u/iBlankked Sep 03 '26

Judging from this guys post history, I don't think he's lying lol

1

u/AmishSkibidiah Sep 03 '26

Who doesnt have backups of a will ?

1

u/martingolding96 Sep 03 '26

Can't you just boot up while not connected to the Internet? I got something similar once while browsing and I just needed to restart my PC to close the browser page that was locking me from closing it normally.

1

u/Shaderys Sep 03 '26

What's more important the will or the money folder?

1

u/tomato_boy_08 Sep 03 '26

How old are you and why would you download random virus on internet?? Pretty sure you got scammed not once but twice at the same time.

Just go to technician and let them recover your files.

1

u/icanloopyou Sep 03 '26

Sweet. You now got scammed out of your money and did EXACTLY what the scammer wants and EXACTLY what the FBI says NOT to do. đŸ—żđŸ·

1

u/Dru1dF0rc3 Sep 03 '26

First power it down don't turn it on and take it to a professional. Also report it to local law enforcement

1

u/ConditionExpress5727 Sep 03 '26

Im sorry but holy shit dude

1

u/RobertCarrCISD Sep 03 '26

Is that a Tkinter window? 

1

u/TurnipBrief1355 Sep 03 '26

whyd you delete your post bruh thats a bad look...

1

u/Fast_Brain2982 Sep 03 '26

The mods deleted it

1

u/Long_Independent2 Sep 07 '26

Python ransomware 😭😭

1

u/InfiniteComposer5279 Sep 07 '26

I am so sorry


1

u/Slosher99 Sep 07 '26

Wouldn't a legally binding will have been recorded somewhere other than a single pc?

1

u/Livid-Dark8276 Sep 08 '26

Its a shitty vibe-coded python malware, power the device off immediately and take an image of the drive and find the malicious file, it can absolutely be decrypted

1

u/Firm_School_5708 Sep 02 '26

Try paying it again, they probably missed it the first time /s

1

u/Fast_Brain2982 Sep 02 '26

I did think maybe it failed but ill have to get more money from my family

1

u/Firm_School_5708 Sep 02 '26

Nah dude I was joking, DO NOT pay them again . Never pay ransomware. If you have ransomware say goodbye to your files. Whether you pay or not they will not unencrypted your files.

1

u/Fast_Brain2982 Sep 02 '26

So its all gone and I, not getting my Roblox account back

1

u/NenoxxCraft Sep 02 '26

Ye. That's an expensive lesson teaching you that 1) you're naive and unfortunately that's how you learn not to be, 2) Dont cheat in online games. You think a multi-billion company would become that way if people could just generate robucks like that ?

1

u/Fast_Brain2982 Sep 02 '26

But the youtune video showed it working perfectly and all the comments said it was real I didn't want to cheat to be mean, I just wanted infinite money in Rainbow Tung Tung Tycoon because the mega dropper costs way too much real money and my parents won't buy it for me.

The website literally said 'PAID SUCCESSFULLY' after I gave them the gift cards, so I thought it was just taking a long time because the game was lagging. It's not fair that they take all that money and don't give my Roblox account back. Is there really no easy way to just unlock my computer so I don't get grounded??

3

u/NenoxxCraft Sep 02 '26

Here's a tip: people on the internet will lie to you if it's in their interest. Videos can be edited. Comments will be from bots. They can just program something to say "successful" while it's just visual.

All a lie. A well-made one to fool people who don't know better.

3

u/Alex6179 Sep 02 '26

No offense, but you're way too naive for the internet.

2

u/abigail3141 Sep 02 '26

No, not really. You can try going the usual account recovery route, but that's not guaranteed to work.

Check out this website: https://www.nomoreransom.org/

And quit downloading sketchy things. The best antivirus is your own intuition. People make these YT videos all the time just to sell something or get you with malware. "ROBLOX FREE HAX NO VIRUS" does not exactly scream serious. Another tip, GitHub is a source code hosting platform. It's quite common for such scams to have a GitHub repo with just an executable file and a README. These are NEVER, and I repeat NEVER legit. If they were actual developers, they'd upload code or at least put the build elsewhere, and have some form of versioning.

And if you're not one for tech at all, here's another link for you: https://virustotal.com/ , run any program you wanna download through that (you don't even have to download first, you can put the download link in there so you don't accidentally click on it), it asks 80 different anti-malware tools what they think, free of charge, no account or download required, checks what others have said about this program (also uniquely identifies renamed files, pretty basic from an IT standpoint, but probably not from yours), and reports all of that back to you, if it detected malware, and if so, what kind.

EDIT: Whatever you downloaded there, run it through VirusTotal as well, maybe that'll help you identify and potentially decrypt it.