“All your work and personal files were encrypted” Ransomware Removal

The encrypted files may not be the only damage done to you. parasite may still be hiding on your PC. To determine whether you've been infected with ransomware, we recommend downloading SpyHunter.

Download SpyHunter Anti-Malware

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

This page aims to help you remove “All your work and personal files were encrypted” for free. Our instructions also cover how any “All your work and personal files were encrypted” file can be recovered.

How can you deal with a Ransomware threat like “All your work and personal files were encrypted” and eventually restore some of your files? This is what we are going to show you here and if you stay with us until the end, you will surely get an idea of what all the options of handling such a nasty infection are. In the next paragraphs, we will share with you some very useful information about the nasty blackmail scheme that “All your work and personal files were encrypted” uses, the way it spreads and infects online users and all the possible methods to recover from its attack. At the end of the article, you are also going to find a step-by-step removal guide, as well as some file restoration instructions, which may help you combat the infection and minimize its harmful effects to a certain extent. So, no more introduction, let’s go to the real action.

What kind of a Ransomware infection is “All your work and personal files were encrypted”?

When we speak about Ransomware, there is hardly anything more harmful we could think of. This type of software is among the most dreadful ones, since it is used prevent the access to your files or to your entire computer and then ruthlessly blackmail you. This is done with the help of malicious scripts, which can lock your screen (screen-locking Ransomware) or encrypt your files (file-encrypting Ransomware). “All your work and personal files were encrypted”, in particular, operates as file-encrypting Ransomware and once it places its secret encryption, you won’t be able to access or use any of your files unless you pay a fat amount of money as ransom. As you can guess, this is a really nasty criminal scheme, which a lot of cyber criminals employ to make money out of the Ransomware victims.

How does file-encrypting Ransomware functions?

Everything begins with the infection. A threat like “All your work and personal files were encrypted” would most probably infect you without you even realizing it. The hackers usually use very tricky and delusive distribution methods to spread the Ransomware. Trojan horses are one very effective tool that can easily introduce a threat like “All your work and personal files were encrypted” to your machine. Another way to catch such an infection is to click on some malicious transmitter, such as a spam email, its harmful attachment, a torrent, fake ad, misleading link, or an already compromised web page. This is enough to activate the Ransomware and, unfortunately, there will be hardly any visible symptoms, which may indicate the presence of the infection on your machine. You will most probably come to know about it only after a shocking ransom message pops up on your screen. By that time, “All your work and personal files were encrypted” would have already encrypted each and every file found on your hard drives and would have probably changed their file extension so that they cannot be opened with any program. The ransom note will then inform you that if you want to use or open them, you will have to pay a certain amount of money, usually in Bitcoins. Only after you do that, you will be given a decryption key, which can bring your encrypted files back to normal.

Will paying the ransom really bring your files back?

This, nobody can tell you. You should act wisely and with caution if you’ve been blackmailed like that because you are basically dealing with anonymous criminals. Giving them money itself is a crime, be it even in the form of ransom. For many Ransomware victims, this is a great loss and disappointment because as typical crooks, the hackers usually vanish the moment they get the payment and simply leave the victims with their files encrypted forever. No decryption key is given, or in the rare cases when the crooks do send one, it often doesn’t work properly and is still unable to bring the files back to normal.

That’s why most security experts, including our team, would advise you not to fall for that trick. There are other options you could try, which may turn out to be more effective. You can always consult with an expert, which may be able to remove “All your work and personal files were encrypted” and offer you a solution for recovering from the Ransomware attack. Paying for advice is still more worthy than paying to some crooks. You can also seek for some instructions and removal guides like the one below. They may be able to help you detect and remove the threat from your computer. However, bear in mind that Ransomware is never easy to deal with. You may still not be able to fully recover from such an infection since, in most of the cases, its encryption is irreversible. No guarantee for success can be given, but still, you can try to save some of your files with the steps in the guide that we have prepared below. Or, you can try to restore them from external copies, if you keep some. The regular backing up is actually the best way to keep your data safe from threats like this one. So, make it a habit, and you will never have to worry if Ransomware encrypts your files again.


Name “All your work and personal files were encrypted”
Type Ransomware
Danger Level High (Ransomware is by far the worst threat you can encounter)
Symptoms Very few and unnoticeable ones before the ransom notification comes up.
Distribution Method From fake ads and fake system requests to spam emails and contagious web pages.
Data Recovery Tool Currently Unavailable
Detection Tool

Keep in mind, SpyHunter’s malware detection tool is free. To remove the infection, you’ll need to purchase the full version. More information about SpyHunter and steps to uninstall.

Remove “All your work and personal files were encrypted”



Some of the steps will likely require you to exit the page. Bookmark it for later reference.

Reboot in Safe Mode (use this guide if you don’t know how to do it).


This is the most important step. Do not skip it if you want to remove “All your work and personal files were encrypted” successfully!

Press CTRL + SHIFT + ESC at the same time and go to the Processes Tab. Try to determine which processes are dangerous. 


Right click on each of them and select Open File Location. Then scan the files with our free online virus scanner:

Drag and Drop Files Here to Scan
Maximum file size: 128MB.

This scanner is free and will always remain free for our website's users. You can find its full-page version at: https://howtoremove.guide/online-virus-scanner/

Scan Results

Virus Scanner Result

After you open their folder, end the processes that are infected, then delete their folders. 

Note: If you are sure something is part of the infection – delete it, even if the scanner doesn’t flag it. No anti-virus program can detect all infections.


Hold the Start Key and R –  copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

hosts_opt (1)

If there are suspicious IPs below “Localhost” – write to us in the comments.

Type msconfig in the search field and hit enter. A window will pop-up:


Go in Startup —> Uncheck entries that have “Unknown” as Manufacturer.

  • Please note that ransomware may even include a fake Manufacturer name to its process. Make sure you check out every process here is legitimate.


To remove parasite on your own, you may have to meddle with system files and registries. If you were to do this, you need to be extremely careful, because you may damage your system.

If you want to avoid the risk, we recommend downloading SpyHunter
a professional malware removal tool.

More information on SpyHunter, steps to uninstallEULAThreat Assessment Criteria, and Privacy Policy.

Type Regedit in the windows search field and press EnterOnce inside, press CTRL and F together and type the virus’s Name. 

Search for the ransomware  in your registries and delete the entries. Be extremely careful –  you can damage your system if you delete entries not related to the ransomware.

Type each of the following in the Windows Search Field:

  1. %AppData%
  2. %LocalAppData%
  3. %ProgramData%
  4. %WinDir%
  5. %Temp%

Delete everything in Temp. The rest just check out for anything recently added. Remember to leave us a comment if you run into any trouble!


How to Decrypt “All your work and personal files were encrypted” files

We have a comprehensive (and daily updated) guide on how to decrypt your files. Check it out here.

If the guide didn’t help you, download the anti-virus program we recommended or ask us in the comments for guidance!

Leave a Comment