I was attacked by some variant of the Cryptolocker virus.
This virus encrypts your files and requests a payment in Bitcoins to deliver the encryption key.
In my case it encrypted all my .cwp and .nff files (melodyne files).
I was able to recover some projects that Sonar saved automatically.
I suspect that the virus entered my PC through a USB stick or a removable disk.
I keep trying to find some tool that solves my problem because there are no guarantees that by paying the ransom receive the key.

Always have a backup drive with a current backup on it but unplugged when not in use today.

The virus encrypted the files in only an hour while I was editing a project that I uploaded from a pendrive

bitman
Always have a backup drive with a current backup on it but unplugged when not in use today.

I don't know how to help the situation now that you're stuck with this virus. Like bitman says, I keep several different back ups on external drives (alternating back ups on rotations). If I had that situation occur, I would likely just reformat or even replace the hard disk and restore from a back up.

The situation described is one more affirmation that back up drives are simply good practice to avoid heartache.

the above is good advice, and the easiest way to put things right, but unfortunately not much help after the fact if you don't have a back up routine in place. (which reminds me i am going to do another back up right now) again, won't help you much in your current situation, but you can learn from it and start a regular backup routine for the future.
 
so can't help, that would suck big time :)
 
best of luck

To find which cryptolocker variant you got (you need one encrypted file) go here
https://id-ransomware.malwarehunterteam.com/
Once you know which variant you have, you MAY be able to decrypt your files.
Many variants of this virus have been reverse  engineered and unlock keys can be generated with free software.

Hi. My first post as a newbie to Sonar, but not to the crypto. As a PC shop owner, we've dealt with these on numerous occassions for customers. Unfortunately there is no solution to any of the recent variants, so please dont pay for a fix from any other party. We have been 100% successful when we pony up the ransom for our customers $$. You are time limited, so if you are considering paying for the unlock, do not let the time expire. Before paying, make a copy of one file on a second machine (not internet connected) and rename the extension to the correct .cwp etc, and ensure that it is a real crypto and not a simple file renamer. Sorry to hear you have been hit. Normal entry is through emails that take you to a site. As mentioned above, virus will travel to all connected drives and network shared drives.

Grant

1. Always have one or more backups. I use an automatic backup to FTP using FreeFileSync, as I described in this topic.
2. Always have a good antivirus active. I use Bitdefender, which has been extremely accurate, which has already detected and prevented various attacks.

 

FreeFileSync ++
 
Alternating between two 1TB USB Drives, one of which travels with me to my day job
 

stickman393
FreeFileSync ++
 
Alternating between two 1TB USB Drives, one of which travels with me to my day job
 

Yep, I also keep a back up rotation away from the house.