robbeo asked 5 years ago
Hi, thnx for your info about this virus. More info for you – I rushed into eradicate it from my system by re-imaging before I read your info (big mistake). I can add that it seems to only encrypt the first sector of every file. I determined this because files I acquired via torrents only show up in the torrent’s piece map as having a corrupt first piece of the downloaded file, so with those, they are easily and quickly fixed by getting the torrent client to redownload the first piece again. Wrt saved data, as you advised, not all files have the added .jdyi extension, however, all files do seem to have the first sector encrypted. Me, I feel a bit lucky cos I only lost about 10GB of irreplaceable data. Lesson learnt!
