Jump to content

Welcome to Geeks to Go - Register now for FREE

Geeks To Go is a helpful hub, where thousands of volunteer geeks quickly serve friendly answers and support. Check out the forums and get free advice from the experts. Register now to gain access to all of our features, it's FREE and only takes one minute. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more.

Create Account How it Works
Photo

Ransomware (Help!) [Closed]

ransomware

  • This topic is locked This topic is locked

#1
thomas10

thomas10

    New Member

  • Member
  • Pip
  • 1 posts
Dear All,
 
Please help.
All my files in certain folder has been encrypted and left this readme file with message below:
 
All your important files were crypted with two strong algoritms - RSA and AES
All files that have been cryped have name, starting with error_
We can sell you the program that will restore all your files.
If you want buy this program, you need send us your Unique Identificator on [email protected]
After that we will send you instructions of payment
Also you can attach one small file (less than 300 Kilobytes) and we will restore it.
 
If we didnt answer you during 1-2 days, it means that we didnt get your letter. So, 
make your own e-mail account on www.ruggedinbox.com and send your letter again.
 
Your Unique Identificator: 1828
 
 
 
Is there any way to decrypt those files?
 
Regards,
Thomas

  • 0

Advertisements


#2
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts

Caveats up front; it's often impossible to decrypt these files without the encryption key
 
However, let's give it a try ;)
 
first, download this program.  http://emsi.at/DecryptPClock
 

Then follow these instructions.

1. take a file that is decrypted (.jpg or any other) and move it over to the DecryptPClock2.exe file. (place it untop of it).
2. this will open the software. (it will use the given .jpg image to determine how to decrypt your images.
3. press the "clear files" button.
4. test 1 image to see if it decrypts successfully. (this will create 2 files: 1 files is the new .jpg file, the other file is a .decbak file. This is your back-up image. Never delete your .decbak image unless you know your .jpg image is fixed!
5a. if successful, use it on your other files.
5b. if unsuccessful, delete the created .jpg image, and change the name of the  [insertnamehere].jpg.decbak file into [insertnamehere].jpg . this will give you back your file before the decryption started.

 

If the above program doesn't work, try this one.

 

 http://emsi.at/DecryptPClock2
 

Same instructions.

1. take a file that is decrypted (.jpg or any other) and move it over to the DecryptPClock2.exe file. (place it untop of it).
2. this will open the software. (it will use the given .jpg image to determine how to decrypt your images.
3. press the "clear files" button.
4. test 1 image to see if it decrypts successfully. (this will create 2 files: 1 files is the new .jpg file, the other file is a .decbak file. This is your back-up image. Never delete your .decbak image unless you know your .jpg image is fixed!
5a. if successful, use it on your other files.
5b. if unsuccessful, delete the created .jpg image, and change the name of the  [insertnamehere].jpg.decbak file into [insertnamehere].jpg . this will give you back your file before the decryption started.

 

If neither of these work, let me know and we'll see if I've uncovered any other options.


  • 0

#3
Biscuithd

Biscuithd

    Trusted Helper

  • Malware Removal
  • 2,573 posts
Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.
  • 0






Similar Topics


Also tagged with one or more of these keywords: ransomware

0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users

As Featured On:

Microsoft Yahoo BBC MSN PC Magazine Washington Post HP