all data encrypted to .vvv extension

[raven4d]

Greetings friends ,

a friend's computer was infected by some sort of virus which encrypts the data files ( excel , word ,sql ... etc ) and changes the extension to .vvv , and then blackmail you to pay money through bitcoin !!

any idea on how to decrypte the files ? i read about this kind of virus , and seems the older versions of it can be dealt with ..

any ideas ?

thank you

[HaQue]

Teslacrypt. it sucks. I think shadow copies or a system restore to a time before the malware got their computer is the only way. paying the criminals that produce this stuff... with a baseball bat.. would be ideal as well

[MindMergepk]

paying the criminals that produce this stuff... with a baseball bat.. would be ideal as well

[raven4d]

OK ..

so if the key was already sent to the developers of the virus , what if i created some extra test files to see if the virus will encrypt them and send back to the developers and manually executed the virus , while i am sniffing the packets goin from hte infected computer ?