cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
Discover new ways to use Dropbox or share your tips with other users like you. Get involved

default

yes

Highlighted

Re: My whole Dropbox account affected with .peet extension Ramsomware

Super User

Hello @vastraafusion, The data in your Dropbox account may be recoverable provided it did not happen long ago. Dropbox keeps history of your files from 30 days (free basic account) to 180 days depending on your account type. 

First of all, you need to get rid of the malware from your affected computer by using some antivirus program or cleanly reinstalling your operating system. If you have important data to recover, you should consult some tech support before reinstalling or deleting the encrypted files, until then you may keep it disconnected from the internet. 

For the Dropbox data, if you have access to another clean computer, you may try to log into Dropbox web. You should disconnect your affected computer from the Dropbox until you remove the ransomware from it. Go to https://www.dropbox.com/account/security In the Devices section, remove the computer that is affected. 

Check the events log: https://www.dropbox.com/events There you should find when your files were altered. 

Then you may go to each file > Check the version history > and Restore them before they were locked. If there are too many files, you may contact Dropbox support directly https://www.dropbox.com/support to help you with restoring your account. 

Reply
Loading...

Re: My files are encrypted by ransomware

New member | Level 2

Hello Lusil,

 

I have the same problem.

Will need to do a clean install of my windows.

Would you be able to help me with restoring my files as well?

How about those that I shared my dropbox folder with?

 

Reply
Loading...

Re: My files are encrypted by ransomware

Dropboxer

Thanks for joining us here @Phloidee!

We'd be more than happy to help you with this. I've reached out to the email associated with your Community profile.

Please just check your inbox when you have a moment and we'll take it from there.

Just to note, any shared folders that you have edit access to we can assist with rolling back too and restoring them back to their original state.

Let me know if you have any other questions - cheers!


Daphne
Community Moderator @ Dropbox
https://dropbox.com/support


Heart Did this post help you? If so, please give it a Like below. 
White check mark Did this post fix your issue/answer your question? If so please press the 'Accept as Solution' button to help others find it.
Arrows Counter Clock Still stuck? Ask me a question! (
Questions asked in the community will likely receive an answer within 4 hours!)

Reply
Loading...

Re: My files are encrypted by ransomware

New member | Level 2

Thanks for the reply @Daphne 

Over the weekend I've managed to roll it back one by one as I found that the ransomware were only deleting the correct files and replacing it with their own copy.  But good thing dropbox does not delete anything unless you opt to delete it permanently.  I was able to recover those files when showing deleted files.  It seems to have fixed it.  Could you confirm that it is the case?

 

This thread is closed due to inactivity. Please feel free to create a new topic here. 

Reply
Loading...
Syncing and uploads

Have a question? Our Dropbox Community is here to help!

Post your question or search for an answer below.


Learn more about using the Community by reading our Community Guidelines.


Hi there,

If you need more help you can log a ticket with our Support Team here (expected response time 24 hours), or contact us on Twitter or Facebook.

For more info on available support options, see this article.

If you found the answer to your question, please 'like' the post to say thanks to the user!

My files are encrypted by ransomware
552 Views
13 Replies
0 Likes
Solved! : See solution
Looking for Dropbox Paper users
Do you use Dropbox Paper?

If so, we're starting a design feedback group and we'd love for you to be a part of it. We have paid feedback opportunities - both in person and remotely - for English speaking users based in the US.

Interested? Take the short survey to let us know.

Take the survey