Data recovery and disk repair questions and discussions related to old-fashioned SATA, SAS, SCSI, IDE, MFM hard drives - any type of storage device that has moving parts
February 14th, 2016, 8:25
Hello everyone
I'm from Athens Greece.
I have a problem with my files. The data on my drive has been encrypted I think. They have an extension changed to .vvv like this:
C:\Users\Dimitris\Desktop\Pictures\Work2015\DSC1011.jpg.vvv
C:\Users\Dimitris\Desktop\Pictures\Work2015\workflow.pdf.vvv
C:\Users\Dimitris\Desktop\Pictures\Work2015\woven.doc.vvv
C:\Users\Dimitris\Desktop\Pictures\Work2015\wrongfile.pdf.vvv
etc
I made a search on Google about it and I read there is no hope and you must pay ransom to get your data back.
I ask here because I see that there are many people with a lot of knowledge.
Thank you.
February 14th, 2016, 8:32
Hi Dimitris, Dimitris here

What you read is wrong. We can recover your data.
You can bring your drive to our offices in Athens and we will be happy to take a look.
February 16th, 2016, 2:31
We got the drive.
It looks like Tesla.
I'm on it.
February 16th, 2016, 10:06
I just got a phone call that my data are on de-cryption process and they will be ready for me to deliver tomorrow!!!
That was very fast!
I am very happy!
February 16th, 2016, 13:47
Teslacrypt 2.0 (.ccc, .vvv, .xyz, .abc, .aaa, .zzz, .ecc, .ezz, and .ecx.), Can be decrypted.
Teslacrypt 3.0 (.micro, .xxx, .ttt), can not be decrypt (to my knowledge).
February 16th, 2016, 17:46
Nice work Dimitris
Powered by phpBB © phpBB Group.