Extension ".swkhclb" What is that file?

Hello all , is there anything that can help me . There is much file on my PC with extension “.swkhclb” in each file jpg, docx, xlxs, pdf, and also zip.

I 've tried to scan the files with Avast , but not detected anything . Help me! . Thank You

Note : printscreen of the attached file .

It looks like ransomware.

If you remove the extension from a jpg, are you able to view it as a normal image?

Thank you for your respond.

When I dispose of the extension, the file becomes corrupted.

https://forum.avast.com/index.php?topic=53253.0

CryptoWall Infection…

What happens if you try to restore a previous version of the file (EG: Before it became infected)

You can try this but there are no guarantees

http://i.imgur.com/y3MMIrs.png
Previous Versions

[*]Right-click the file/folder and click Properties.
[*]Click Previous Versions.
[*]This tab will list all copies of the file and the date they were backed up.
[*]To restore a particular version of the file, click Copy and select the directory you wish to restore the file to.
[*]If you wish to restore the selected file and replace the existing one, click Restore
[*]If you wish to view the contents of the file before restoring, click Open.

http://i.imgur.com/MzmiIl9.gif
ShadowExplorer

[*]Please download ShadowExplorer and save the file to your Desktop
[*]Right-Click ShadowExplorer-0.9-portable.zip and click Extract All. Select your Desktop and click Extract
[*]Right-Click ShadowExplorer.exe and select
http://Run as administrator
to run the programme.
[*]You will see a drop-down menu with the shadow copies of all partitions and disks present.
[*]Click C:\ from the drop-down menu.
[*]To the right, pick a date prior to the infection from the drop-down menu.
[*]To restore a whole folder, right-click on your desired folder and click Export. You will then be prompted as to where you would like to restore the contents of the folder to.

[img]http://i.imgur.com/J8xQM97.png
File Recovery Software

File Recovery Software may be able to recover the original file deleted by the infection. Please bear in mind, the more you use the machine after the files are encrypted, the harder it will be for the recovery software to recover your files.

[]
http://i.imgur.com/fSA1TL4.png
R-Studio
[
]
http://i.imgur.com/C08PZmH.png
Photorec
[*]
http://i.imgur.com/uc6sByo.png
Recuva

Thanks all for information, i will tried :slight_smile:

My D drive is inactive restore points . So there is no previous view.