Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Please help to decrypt files encrypted by ransomware virus [Solved]


  • This topic is locked This topic is locked

#1
ericbondoc

ericbondoc

    New Member

  • Member
  • Pip
  • 1 posts

Hi Everyone,

 

I would like to share as what I have discovered and hopefully found a cure to decrypt all my encrypted files.

 

All my files was infected by this ransom or cryptowall virus. There's was a note and every folder infected. Please see below message of the noted in text file.

 

-----------------

All your important files were crypted with two strong algoritms - RSA and AES
All files that have been cryped have name, starting with error_
We can sell you the program that will restore all your files.
If you want buy this program, you need send us your Unique Identificator on [email protected]
After that we will send you instructions of payment
Also you can attach one small file (less than 300 Kilobytes) and we will restore it.

If we didnt answer you during 1-2 days, it means that we didnt get your letter. So,
make your own e-mail account on www.ruggedinbox.com and send your letter again.

 

 

 

I just wrote an email and attached the encypted files to [email protected] and received the response this morning together with the decrypted files which i sent. (.xls file)

 

---------------------

From: [email protected] [mailto:[email protected]]

Sent: Wednesday, 21 January 2015 9:07 AM

To: ejb

Subject: Re: 19683

 

Hello. Program costs 2 bitcoins (now 2 bitcoins = 400 usd)

 

You need send 2 bitcoins to address 1Jvv62ChWGj2DwLcGtCJtNtrfpCkfLrvEJ

 

 

 

You can use one of those sites to change your money to bitcoins:

 

www.btc-e.com

 

www.bitstamp.net

 

www.goldux.com

 

www.kraken.com

 

www.bitquick.co

 

You dont need install any bitcoin software. You need only use one one those bitcoin services or others (also you can look here other bitcoin services for your country - www.howtobuybitcoins.info) to send us bitcoins.

 

And we dont need your files. We only need some money.

 

 

 

I attached your decrypted file.

 

----------------

 

I manage to scan my computer and shadow copies is not present.

Please help if anybody out there have the solution to decrypt the files.

I have tried all the possible ways to decrypt but still no luck.

 

-pandaransomdecrypt

-anti cryptorbit

-https://www.decryptcryptolocker.com/

-http://support.kaspe...es/disinfection

- kaspersky RannohDecryptor

-stinger32

 

 

Thank you.


  • 0

Advertisements


#2
Satchfan

Satchfan

    Trusted Helper

  • Malware Removal
  • 585 posts

Hello ericbondoc and welcome to G2G

Unfortunately at this time there is no way to retrieve the private key that can be used to decrypt your files without paying the ransom on the CryptoWall Decryption Service.

Please read this for more information.
 

Satchfan


  • 0

#3
Satchfan

Satchfan

    Trusted Helper

  • Malware Removal
  • 585 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP