Data recovery and disk repair questions and discussions related to old-fashioned SATA, SAS, SCSI, IDE, MFM hard drives - any type of storage device that has moving parts
Post a reply

Toshiba 500gb hard drive encrypted virus

April 24th, 2016, 7:56

Hello friends
I have a document encrypted virus .crypt help me
I did try many ways but not decipher
thank you
Attachments
virus.JPG
CHứng mất ngủ.doc
(32.88 KiB) Downloaded 700 times

Re: Toshiba 500gb hard drive encrypted virus

April 24th, 2016, 8:55

How have you tried to decipher?

Re: Toshiba 500gb hard drive encrypted virus

April 24th, 2016, 9:34

labtech wrote:How have you tried to decipher?

I follow a few guidelines as here noransom.kaspersky.com
I send 1 files sample decrypt
You help me
thank you

Re: Toshiba 500gb hard drive encrypted virus

April 24th, 2016, 12:05

That's because you don't have the CoinVault or Bitcryptor ransomware.

Try this instead:

http://www.bleepingcomputer.com/news/security/gomasom-crypt-ransomware-decrypted/

make sure you are WORKING ON A COPY of the data, and always keep a good original copy safe. If you have had trouble simply identifying it, then maybe consider giving this job to someone that has the experience to give it the required diligence.

You could have TeslaCrypt 4.0, and if so... ouch, sorry :-(

Re: Toshiba 500gb hard drive encrypted virus

April 24th, 2016, 13:56

HaQue wrote:That's because you don't have the CoinVault or Bitcryptor ransomware.

Try this instead:

http://www.bleepingcomputer.com/news/security/gomasom-crypt-ransomware-decrypted/

make sure you are WORKING ON A COPY of the data, and always keep a good original copy safe. If you have had trouble simply identifying it, then maybe consider giving this job to someone that has the experience to give it the required diligence.

You could have TeslaCrypt 4.0, and if so... ouch, sorry :-(

I use this screen notice how you
help me
Attachments
test.JPG

Re: Toshiba 500gb hard drive encrypted virus

April 24th, 2016, 15:45

I would recommend 1st understanding what malware you are dealing with (https://id-ransomware.malwarehunterteam.com/), then 2nd determine whether there is a solution for it (if not consider if worthwhile coming up with your own), and 3rd apply solution.

+1 on working with a copy of files

Re: Toshiba 500gb hard drive encrypted virus

April 25th, 2016, 14:25

labtech wrote:I would recommend 1st understanding what malware you are dealing with (https://id-ransomware.malwarehunterteam.com/), then 2nd determine whether there is a solution for it (if not consider if worthwhile coming up with your own), and 3rd apply solution.

+1 on working with a copy of files

Brother can help me decipher virus .crypt
thanks

Re: Toshiba 500gb hard drive encrypted virus

April 26th, 2016, 2:43

Hi,

Go for Raw recovery first.. see if you can open the office and pdf files..

Re: Toshiba 500gb hard drive encrypted virus

May 20th, 2016, 18:05

VaibhavS wrote:Hi,

Go for Raw recovery first.. see if you can open the office and pdf files..


I was full encryption of documents in the hard disk drive
I've used the Launch Data Recovery
Results failed

Re: Toshiba 500gb hard drive encrypted virus

May 20th, 2016, 20:10

Spildit wrote:Please read here :

http://www.hddoracle.com/viewtopic.php?f=150&t=1583

And try the attached tool.

I've used this tool but can not decipher

Re: Toshiba 500gb hard drive encrypted virus

May 20th, 2016, 23:08

datahdd116 wrote:
Spildit wrote:Please read here :

http://www.hddoracle.com/viewtopic.php?f=150&t=1583

And try the attached tool.

I've used this tool but can not decipher


yes it can.

steps to reproduce:

1. Extract tool to c:\TeslaDecoder
2. Make folder "encrypted" in that folder and put encrypted files in there (c:\TeslaDecoder\encrypted\)
3. add the file extension ".xxx" to all files.
4. run TeslaDecoder.exe.
5. Click "Set Key" and choose ".xxx, .ttt, .micro, .mp3" and click "set key"
6. Click "Decrypt Folder" and choose your c:\TeslaDecoder\encrypted\" folder, then say "no" to deleting your original files.
7. Do the happy dance!

1.jpg


2.jpg


3.jpg


You owe me AU$400! :-)~

Re: Toshiba 500gb hard drive encrypted virus

May 21st, 2016, 1:44

HaQue wrote:
datahdd116 wrote:
Spildit wrote:Please read here :

http://www.hddoracle.com/viewtopic.php?f=150&t=1583

And try the attached tool.

I've used this tool but can not decipher


yes it can.

steps to reproduce:

1. Extract tool to c:\TeslaDecoder
2. Make folder "encrypted" in that folder and put encrypted files in there (c:\TeslaDecoder\encrypted\)
3. add the file extension ".xxx" to all files.
4. run TeslaDecoder.exe.
5. Click "Set Key" and choose ".xxx, .ttt, .micro, .mp3" and click "set key"
6. Click "Decrypt Folder" and choose your c:\TeslaDecoder\encrypted\" folder, then say "no" to deleting your original files.
7. Do the happy dance!

1.jpg


2.jpg


3.jpg


You owe me AU$400! :-)~


before I am using the old version not get the key.
I downloaded the new update 18/5 fine.
thanks
I invite you to whisky :D :D
Thanks
Post a reply