Switch to full style
In-depth technology research: finding new ways to recover data, accessing firmware, writing programs, reading bits off the platter, recovering data from dust.

Forum rules

Please do not post questions about data recovery cases here (use this forum instead). This forum is for topics on finding new ways to recover data. Accessing firmware, writing programs, reading bits off the platter, recovering data from dust...
Post a reply

Malloxx ransomware recovery

August 28th, 2023, 9:12

Is there any known solution to decrypt Malloxx (Targetcompany) ransomware encrypted data?
Avast has released free decrypter ,but it does not work with this variant.

Re: Malloxx ransomware recovery

August 29th, 2023, 5:03

Unfortunately there isn't.

Re: Malloxx ransomware recovery

August 29th, 2023, 8:22

northwind wrote:Unfortunately there isn't.


Thank you northwind.
Is there anyway to repair encrypted mdf file using some utilty. That is the only way left unfortunately

Re: Malloxx ransomware recovery

August 30th, 2023, 2:35

There are plenty sql repair utilities with ambiguous results most of the time. Stellar, Systools and Repair Toolbox being some of them.
You can try all of them in demo and see which gives you best results.

Re: Malloxx ransomware recovery

August 30th, 2023, 23:20

northwind wrote:There are plenty sql repair utilities with ambiguous results most of the time. Stellar, Systools and Repair Toolbox being some of them.
You can try all of them in demo and see which gives you best results.


Is it possible to get full or partial SQL data after repairs ? Has anyone done this ?I have a pending case too. What will be charges for the same.
If customer agrees I am ready to pay. I have tried all above utilities (demo mode) but outcome of the same is not known though some tables are shown in preview.
Any help appreciated

Re: Malloxx ransomware recovery

August 31st, 2023, 3:34

As a general rule, after repairing your database, it will attach to the SQL server, however there will be data missing. The amount of missing data will be dependant on the corruption of the file due to encryption.

In some cases, where we get lucky, we were able to manually repair the file and get almost perfect result, but that was due to poor encryption of the ransomware, where it encrypted areas that weren't really containing user data, only headers and generic stuff.

In most of the cases with the auto repair tools, the result is poor because critical tables will be missing.

Re: Malloxx ransomware recovery

August 31st, 2023, 11:39

northwind wrote:As a general rule, after repairing your database, it will attach to the SQL server, however there will be data missing. The amount of missing data will be dependant on the corruption of the file due to encryption.

In some cases, where we get lucky, we were able to manually repair the file and get almost perfect result, but that was due to poor encryption of the ransomware, where it encrypted areas that weren't really containing user data, only headers and generic stuff.

In most of the cases with the auto repair tools, the result is poor because critical tables will be missing.


Thank you so much norhwind , before purchasing expensive tool I have got clear idea about outcome which depends upon level of coruption.
I think if customer approves costing and his software vendor for manual reconstruction & repairs then I will send file to developers .They might be able to repair it far better than retail tool.
Thanks a lot :-D :good:
Post a reply