Reply
Contributor
ap123456
Posts: 24
Registered: ‎05-31-2012

Re: Ransomware PLEASE HELP

time will tell?how will i know when a solution is found?

Bot Obliterator
Quads
Posts: 13,935
Registered: ‎07-21-2008

Re: Ransomware PLEASE HELP

No one I know yet has run the file that installs it (yet) can't find one, but here is another thread http://www.bleepingcomputer.com/forums/topic455347.html

 

If it turns out to be based on the later ACCDFISA versions or the GPcode(r) series next to no show, or with GPcode(r) No chance, it would take approx 35 to 40 years for a PC to brute force the encryption.

 

If another family all togeter or based on a earlier ACCDFISA variant ypu have a better chance.

 

That is why people should have a backup set of the likes of photos and other personal files.

 

Quads

Contributor
ap123456
Posts: 24
Registered: ‎05-31-2012

Re: Ransomware PLEASE HELP

i really hope someone finds a solution. i will be waiting and checking this forum and the site you listed. i will make sure to keep all those files in the meantime. thank you. if you find out anything eventually, please let me know.

peterweb
Posts: 4,853
Kudos: 543
Solutions: 184
Registered: ‎04-17-2008

Re: Ransomware PLEASE HELP

Quads

 

The OP noted that a virus had been detected and removed. Does the removal cause the encryption to take place? ie if the virus had not been removed would the files still be intact ?


Things happen. Export/Backup your Identity Safe data.
Symantec Employee
James_Carr
Posts: 83
Registered: ‎04-26-2012

Re: Ransomware PLEASE HELP

[ Edited ]

[Edit] After a little bit of research, it looks like someone has almost completely reversed the threat. I'll try to get ahold of him and see if I can work with him. Creating a public decryption tool for this threat would be a great.

SendOfJive
Posts: 9,972
Kudos: 4,219
Solutions: 709
Registered: ‎02-07-2009

Re: Ransomware PLEASE HELP


Quads wrote:

That is why people should have a backup set of the likes of photos and other personal files.


I would just like to second this.  Stuff happens.  Malware, hard drive failures, power surges, fires, floods and Quads' favorite: earthquakes.  If the data on your PC is important, back it up and store the backups on media that is not connected to the PC.

Contributor
ap123456
Posts: 24
Registered: ‎05-31-2012

Re: Ransomware PLEASE HELP

I will now always back up my data. I am also really excited about the recent positive message. I really hope the affects of the virus can be reversed. I will be checking back here for any updates. It seems like this particular virus is becoming common in May. I just told a friend and they said they had the same problem but they just gave up and deleted all of their encrypted files. Thank you to all the posters. I really appreciate it and am looking forward to your updates.

peterweb
Posts: 4,853
Kudos: 543
Solutions: 184
Registered: ‎04-17-2008

Re: Ransomware PLEASE HELP


SendOfJive wrote:

Quads wrote:

That is why people should have a backup set of the likes of photos and other personal files.


I would just like to second this.  Stuff happens.  Malware, hard drive failures, power surges, fires, floods and Quads' favorite: earthquakes.  If the data on your PC is important, back it up and store the backups on media that is not connected to the PC.


And it would help to be off site. Give an external drive with the backup to your parents or trusted friend. That way if there is a fire, the backup does not get destroyed with the originals.

Online backup can also be an option.


Things happen. Export/Backup your Identity Safe data.
Bot Obliterator
Quads
Posts: 13,935
Registered: ‎07-21-2008

Re: Ransomware PLEASE HELP


peterweb wrote:

Quads

 

The OP noted that a virus had been detected and removed. Does the removal cause the encryption to take place? ie if the virus had not been removed would the files still be intact ?


Basically as soon as you see the message like the screenshot I posted you files are then encryped seperately or inside an archive.

 

Quads

peterweb
Posts: 4,853
Kudos: 543
Solutions: 184
Registered: ‎04-17-2008

Re: Ransomware PLEASE HELP


Quads wrote:

Basically as soon as you see the message like the screenshot I posted you files are then encryped seperately or inside an archive.

 

Quads


Thanks for the clarification.


Things happen. Export/Backup your Identity Safe data.