Jump to content

Welcome to Geeks to Go - Register now for FREE

Need help with your computer or device? Want to learn new tech skills? You're in the right place!
Geeks to Go is a friendly community of tech experts who can solve any problem you have. Just create a free account and post your question. Our volunteers will reply quickly and guide you through the steps. Don't let tech troubles stop you. Join Geeks to Go now and get the support you need!

How it Works Create Account
Photo

Please help to decrypt files encrypted by ransomware virus [Solved]


  • This topic is locked This topic is locked

#1
ericbondoc

ericbondoc

    New Member

  • Member
  • Pip
  • 1 posts

Hi Everyone,

 

I would like to share as what I have discovered and hopefully found a cure to decrypt all my encrypted files.

 

All my files was infected by this ransom or cryptowall virus. There's was a note and every folder infected. Please see below message of the noted in text file.

 

-----------------

All your important files were crypted with two strong algoritms - RSA and AES
All files that have been cryped have name, starting with error_
We can sell you the program that will restore all your files.
If you want buy this program, you need send us your Unique Identificator on [email protected]
After that we will send you instructions of payment
Also you can attach one small file (less than 300 Kilobytes) and we will restore it.

If we didnt answer you during 1-2 days, it means that we didnt get your letter. So,
make your own e-mail account on www.ruggedinbox.com and send your letter again.

 

 

 

I just wrote an email and attached the encypted files to [email protected] and received the response this morning together with the decrypted files which i sent. (.xls file)

 

---------------------

From: [email protected] [mailto:[email protected]]

Sent: Wednesday, 21 January 2015 9:07 AM

To: ejb

Subject: Re: 19683

 

Hello. Program costs 2 bitcoins (now 2 bitcoins = 400 usd)

 

You need send 2 bitcoins to address 1Jvv62ChWGj2DwLcGtCJtNtrfpCkfLrvEJ

 

 

 

You can use one of those sites to change your money to bitcoins:

 

www.btc-e.com

 

www.bitstamp.net

 

www.goldux.com

 

www.kraken.com

 

www.bitquick.co

 

You dont need install any bitcoin software. You need only use one one those bitcoin services or others (also you can look here other bitcoin services for your country - www.howtobuybitcoins.info) to send us bitcoins.

 

And we dont need your files. We only need some money.

 

 

 

I attached your decrypted file.

 

----------------

 

I manage to scan my computer and shadow copies is not present.

Please help if anybody out there have the solution to decrypt the files.

I have tried all the possible ways to decrypt but still no luck.

 

-pandaransomdecrypt

-anti cryptorbit

-https://www.decryptcryptolocker.com/

-http://support.kaspe...es/disinfection

- kaspersky RannohDecryptor

-stinger32

 

 

Thank you.


  • 0

Advertisements


#2
Satchfan

Satchfan

    Trusted Helper

  • Malware Removal
  • 624 posts

Hello ericbondoc and welcome to G2G

Unfortunately at this time there is no way to retrieve the private key that can be used to decrypt your files without paying the ransom on the CryptoWall Decryption Service.

Please read this for more information.
 

Satchfan


  • 0

#3
Satchfan

Satchfan

    Trusted Helper

  • Malware Removal
  • 624 posts
Since this issue appears to be resolved ... this Topic has been closed. Glad we could help. :)

If you're the topic starter, and need this topic reopened, please contact a staff member with the address of the thread.

Everyone else please begin a New Topic.
  • 0






Similar Topics

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP