MultiDrive – free backup, clone & wipe disk utility from Atola Technology

Main » Forums home » Conventional hard drives

All times are UTC - 5 hours [ DST ]



Post new topic Reply to topic  Page 1 of 1
  [ 12 posts ] 
  Previous topic | Next topic 
Author Message
datahdd116
 Post subject: Toshiba 500gb hard drive encrypted virus
PostPosted: April 24th, 2016, 7:56 
Offline

Banned User

Joined: January 1st, 2016, 11:12
Posts: 90
Location: Viet nam
Hello friends
I have a document encrypted virus .crypt help me
I did try many ways but not decipher
thank you


Attachments:
virus.JPG
virus.JPG [ 119.18 KiB | Viewed 11242 times ]
CHứng mất ngủ.doc [32.88 KiB]
Downloaded 700 times

_________________
Banned for spamming
Top
 Profile  
 
labtech
 Post subject: Re: Toshiba 500gb hard drive encrypted virus
PostPosted: April 24th, 2016, 8:55 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3669
Location: Massachusetts, USA
How have you tried to decipher?

_________________
Hard Disk Drive (HDD), Solid State Drive (SSD, SATA, NVMe, etc), USB Flash Drive and RAID Data Recovery Specialist in Massachusetts
Top
 Profile  
 
datahdd116
 Post subject: Re: Toshiba 500gb hard drive encrypted virus
PostPosted: April 24th, 2016, 9:34 
Offline

Banned User

Joined: January 1st, 2016, 11:12
Posts: 90
Location: Viet nam
labtech wrote:
How have you tried to decipher?

I follow a few guidelines as here noransom.kaspersky.com
I send 1 files sample decrypt
You help me
thank you

_________________
Banned for spamming
Top
 Profile  
 
HaQue
 Post subject: Re: Toshiba 500gb hard drive encrypted virus
PostPosted: April 24th, 2016, 12:05 
Offline
User avatar

Joined: December 4th, 2012, 1:35
Posts: 3903
Location: Adelaide, Australia
That's because you don't have the CoinVault or Bitcryptor ransomware.

Try this instead:

http://www.bleepingcomputer.com/news/security/gomasom-crypt-ransomware-decrypted/

make sure you are WORKING ON A COPY of the data, and always keep a good original copy safe. If you have had trouble simply identifying it, then maybe consider giving this job to someone that has the experience to give it the required diligence.

You could have TeslaCrypt 4.0, and if so... ouch, sorry :-(
Top
 Profile  
 
datahdd116
 Post subject: Re: Toshiba 500gb hard drive encrypted virus
PostPosted: April 24th, 2016, 13:56 
Offline

Banned User

Joined: January 1st, 2016, 11:12
Posts: 90
Location: Viet nam
HaQue wrote:
That's because you don't have the CoinVault or Bitcryptor ransomware.

Try this instead:

http://www.bleepingcomputer.com/news/security/gomasom-crypt-ransomware-decrypted/

make sure you are WORKING ON A COPY of the data, and always keep a good original copy safe. If you have had trouble simply identifying it, then maybe consider giving this job to someone that has the experience to give it the required diligence.

You could have TeslaCrypt 4.0, and if so... ouch, sorry :-(

I use this screen notice how you
help me


Attachments:
test.JPG
test.JPG [ 22.14 KiB | Viewed 11170 times ]

_________________
Banned for spamming
Top
 Profile  
 
labtech
 Post subject: Re: Toshiba 500gb hard drive encrypted virus
PostPosted: April 24th, 2016, 15:45 
Offline

Joined: August 18th, 2010, 17:35
Posts: 3669
Location: Massachusetts, USA
I would recommend 1st understanding what malware you are dealing with (https://id-ransomware.malwarehunterteam.com/), then 2nd determine whether there is a solution for it (if not consider if worthwhile coming up with your own), and 3rd apply solution.

+1 on working with a copy of files

_________________
Hard Disk Drive (HDD), Solid State Drive (SSD, SATA, NVMe, etc), USB Flash Drive and RAID Data Recovery Specialist in Massachusetts
Top
 Profile  
 
datahdd116
 Post subject: Re: Toshiba 500gb hard drive encrypted virus
PostPosted: April 25th, 2016, 14:25 
Offline

Banned User

Joined: January 1st, 2016, 11:12
Posts: 90
Location: Viet nam
labtech wrote:
I would recommend 1st understanding what malware you are dealing with (https://id-ransomware.malwarehunterteam.com/), then 2nd determine whether there is a solution for it (if not consider if worthwhile coming up with your own), and 3rd apply solution.

+1 on working with a copy of files

Brother can help me decipher virus .crypt
thanks

_________________
Banned for spamming
Top
 Profile  
 
VaibhavS
 Post subject: Re: Toshiba 500gb hard drive encrypted virus
PostPosted: April 26th, 2016, 2:43 
Offline

Joined: March 17th, 2015, 10:37
Posts: 27
Location: Mumbai
Hi,

Go for Raw recovery first.. see if you can open the office and pdf files..
Top
 Profile  
 
datahdd116
 Post subject: Re: Toshiba 500gb hard drive encrypted virus
PostPosted: May 20th, 2016, 18:05 
Offline

Banned User

Joined: January 1st, 2016, 11:12
Posts: 90
Location: Viet nam
VaibhavS wrote:
Hi,

Go for Raw recovery first.. see if you can open the office and pdf files..


I was full encryption of documents in the hard disk drive
I've used the Launch Data Recovery
Results failed

_________________
Banned for spamming
Top
 Profile  
 
datahdd116
 Post subject: Re: Toshiba 500gb hard drive encrypted virus
PostPosted: May 20th, 2016, 20:10 
Offline

Banned User

Joined: January 1st, 2016, 11:12
Posts: 90
Location: Viet nam
Spildit wrote:
Please read here :

http://www.hddoracle.com/viewtopic.php?f=150&t=1583

And try the attached tool.

I've used this tool but can not decipher

_________________
Banned for spamming
Top
 Profile  
 
HaQue
 Post subject: Re: Toshiba 500gb hard drive encrypted virus
PostPosted: May 20th, 2016, 23:08 
Offline
User avatar

Joined: December 4th, 2012, 1:35
Posts: 3903
Location: Adelaide, Australia
datahdd116 wrote:
Spildit wrote:
Please read here :

http://www.hddoracle.com/viewtopic.php?f=150&t=1583

And try the attached tool.

I've used this tool but can not decipher


yes it can.

steps to reproduce:

1. Extract tool to c:\TeslaDecoder
2. Make folder "encrypted" in that folder and put encrypted files in there (c:\TeslaDecoder\encrypted\)
3. add the file extension ".xxx" to all files.
4. run TeslaDecoder.exe.
5. Click "Set Key" and choose ".xxx, .ttt, .micro, .mp3" and click "set key"
6. Click "Decrypt Folder" and choose your c:\TeslaDecoder\encrypted\" folder, then say "no" to deleting your original files.
7. Do the happy dance!

Attachment:
1.jpg
1.jpg [ 128.51 KiB | Viewed 10848 times ]


Attachment:
2.jpg
2.jpg [ 57.83 KiB | Viewed 10848 times ]


Attachment:
3.jpg
3.jpg [ 138.98 KiB | Viewed 10848 times ]


You owe me AU$400! :-)~
Top
 Profile  
 
datahdd116
 Post subject: Re: Toshiba 500gb hard drive encrypted virus
PostPosted: May 21st, 2016, 1:44 
Offline

Banned User

Joined: January 1st, 2016, 11:12
Posts: 90
Location: Viet nam
HaQue wrote:
datahdd116 wrote:
Spildit wrote:
Please read here :

http://www.hddoracle.com/viewtopic.php?f=150&t=1583

And try the attached tool.

I've used this tool but can not decipher


yes it can.

steps to reproduce:

1. Extract tool to c:\TeslaDecoder
2. Make folder "encrypted" in that folder and put encrypted files in there (c:\TeslaDecoder\encrypted\)
3. add the file extension ".xxx" to all files.
4. run TeslaDecoder.exe.
5. Click "Set Key" and choose ".xxx, .ttt, .micro, .mp3" and click "set key"
6. Click "Decrypt Folder" and choose your c:\TeslaDecoder\encrypted\" folder, then say "no" to deleting your original files.
7. Do the happy dance!

Attachment:
1.jpg


Attachment:
2.jpg


Attachment:
3.jpg


You owe me AU$400! :-)~


before I am using the old version not get the key.
I downloaded the new update 18/5 fine.
thanks
I invite you to whisky :D :D
Thanks

_________________
Banned for spamming
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 12 posts ] 

Main » Forums home » Conventional hard drives

All times are UTC - 5 hours [ DST ]

Who is online

Users browsing this forum: Google [Bot] and 132 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Switch to mobile style
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group