April 24th, 2016, 7:56
April 24th, 2016, 8:55
April 24th, 2016, 9:34
labtech wrote:How have you tried to decipher?
April 24th, 2016, 12:05
April 24th, 2016, 13:56
HaQue wrote:That's because you don't have the CoinVault or Bitcryptor ransomware.
Try this instead:
http://www.bleepingcomputer.com/news/security/gomasom-crypt-ransomware-decrypted/
make sure you are WORKING ON A COPY of the data, and always keep a good original copy safe. If you have had trouble simply identifying it, then maybe consider giving this job to someone that has the experience to give it the required diligence.
You could have TeslaCrypt 4.0, and if so... ouch, sorry
April 24th, 2016, 15:45
April 25th, 2016, 14:25
labtech wrote:I would recommend 1st understanding what malware you are dealing with (https://id-ransomware.malwarehunterteam.com/), then 2nd determine whether there is a solution for it (if not consider if worthwhile coming up with your own), and 3rd apply solution.
+1 on working with a copy of files
April 26th, 2016, 2:43
May 20th, 2016, 18:05
VaibhavS wrote:Hi,
Go for Raw recovery first.. see if you can open the office and pdf files..
May 20th, 2016, 20:10
Spildit wrote:Please read here :
http://www.hddoracle.com/viewtopic.php?f=150&t=1583
And try the attached tool.
May 20th, 2016, 23:08
datahdd116 wrote:Spildit wrote:Please read here :
http://www.hddoracle.com/viewtopic.php?f=150&t=1583
And try the attached tool.
I've used this tool but can not decipher
May 21st, 2016, 1:44
HaQue wrote:datahdd116 wrote:Spildit wrote:Please read here :
http://www.hddoracle.com/viewtopic.php?f=150&t=1583
And try the attached tool.
I've used this tool but can not decipher
yes it can.
steps to reproduce:
1. Extract tool to c:\TeslaDecoder
2. Make folder "encrypted" in that folder and put encrypted files in there (c:\TeslaDecoder\encrypted\)
3. add the file extension ".xxx" to all files.
4. run TeslaDecoder.exe.
5. Click "Set Key" and choose ".xxx, .ttt, .micro, .mp3" and click "set key"
6. Click "Decrypt Folder" and choose your c:\TeslaDecoder\encrypted\" folder, then say "no" to deleting your original files.
7. Do the happy dance!
You owe me AU$400!~
Powered by phpBB © phpBB Group.