Reply
Bot Obliterator
Quads
Posts: 13,248
Registered: ‎07-21-2008

Re: Ransomware PLEASE HELP


SendOfJive wrote:

Quads wrote:

That is why people should have a backup set of the likes of photos and other personal files.


I would just like to second this.  Stuff happens.  Malware, hard drive failures, power surges, fires, floods and Quads' favorite: earthquakes.  If the data on your PC is important, back it up and store the backups on media that is not connected to the PC.



I don't think, My favorite after going through near 10,500 quakes the bigger ones with world record G-Forces near a City anywhere in the world.

 

You should see what it has done to our City.

 

Quads

SendOfJive
Posts: 9,890
Kudos: 4,189
Solutions: 706
Registered: ‎02-07-2009

Re: Ransomware PLEASE HELP

[ Edited ]

Yeah, "favorite" was probaby an unfortunate term.  I did not mean to be flippant.  What I meant was that you have had a lot of experience with earthquakes, and know a good deal about them.

Regular Contributor
rkasse
Posts: 51
Registered: ‎03-08-2012

Re: Ransomware PLEASE HELP

There are numerous backup/restore imaging programs.  Some very good ones are free.  So buy an external hard drive (available for less than $100) and backup your system on a regular basis.  The entire cost is less than one computer repair and you can have your system back with just a few clicks and about 30 minutes.

Bot Obliterator
Quads
Posts: 13,248
Registered: ‎07-21-2008

Re: Ransomware PLEASE HELP

You can end up with the same "encrpted" problem with external hard drives.

 

Quads

peterweb
Posts: 4,582
Kudos: 523
Solutions: 177
Registered: ‎04-17-2008

Re: Ransomware PLEASE HELP

[ Edited ]

rkasse wrote:

There are numerous backup/restore imaging programs.  Some very good ones are free.  So buy an external hard drive (available for less than $100) and backup your system on a regular basis.  The entire cost is less than one computer repair and you can have your system back with just a few clicks and about 30 minutes.


To help avoid, but not elliminate, what Quads noted about external drives still being at risk, be sure do disconnect the extenal drive except to do your backup. And obviously do not back up if you think you may have any kind of infection.

 

Nothing is 100% secure unless you disconnect from the outside world. But what is the use of that?


Things happen. Export/Backup your Identity Safe data.
Contributor
herman1134
Posts: 16
Registered: ‎06-02-2012

Re: Ransomware PLEASE HELP

I have the same problem.  Is there a fix yet?

 

I only got the txt.  I never got a popup window.  All my docs, jogs, pdfs, and most of my installation files have been .crypt on 5/31/2012 at around 2:00 PM.

 

There is a Warning.txt file in all of my directories. That says:

YOUR ID: 559
Your computer protection level was very low and your system was attacked by
trojan program which encrypts data.

All your documents, text files, databases, pictures and etc. were encrypted by
secure AES algorithm with unique password.

Random password entry attempt  is imposible, all the data will be damaged
after first unsuccessful attempt.

Programs that can restore data wont help you as original files will be destroyed
without a possibility to restore them.
It is useless to ask someone for  help. Only we can decipher your data.


We will create a decipher program if you really need your files.COST IS $50.
We accept payments through MoneyPak. ( you can find more information on
their website  www.moneypak.com).

Enter MoneyPak number with $50 value as well as your e-mail and click Pay.
You will receive decipher program which will help you to retrieve your files
and remove malware from your computer in 24 HOURS.)

We provide 100% guarantee that your data will be restored in 24 hours after
receiving payment from you.
receive a decipher. Such actions may make your data restoration impossible.
ATTENTION: In case if MoneyPak number and/or e-mail is invalid it will make
restoration process more complicated. PRODUCT COST WILL RISE TO $150.  
EMAIL: decryptmeplease@yahoo.com

 

Please don't warn me to backup my files, I have but not all of them.  There needs to be a real solution to this.

Thank you.

Bot Obliterator
Quads
Posts: 13,248
Registered: ‎07-21-2008

Re: Ransomware PLEASE HELP

Please don't warn me to backup my files, I have but not all of them.  There needs to be a real solution to this.

Thank you.

 

If it's the GPcode family there will be no fix for the encryption

 

I am still trying to find the file(s) that when run infect the system with it.

 

Quads

Regular Contributor
rkasse
Posts: 51
Registered: ‎03-08-2012

Re: Ransomware PLEASE HELP

[ Edited ]

peterweb wrote:

To help avoid, but not elliminate, what Quads noted about external drives still being at risk, be sure do disconnect the extenal drive except to do your backup. And obviously do not back up if you think you may have any kind of infection.

 

Nothing is 100% secure unless you disconnect from the outside world. But what is the use of that?


Wouldn't a valid system backup on an external drive be able to be restored when booting from a WinPE bootable CD?

 

How about just reformatting the drive and then a restore from a bootable cd?

Contributor
ap123456
Posts: 24
Registered: ‎05-31-2012

Re: Ransomware PLEASE HELP

Someone has to find a solution to reverse the effects of this ransomware virus. As for backing up, I did have my files backed up on an external harddrive, but the external drive was connected to my computer at the time. All my jpgs and docs on the external drive were also changed to .crypt. I lost important docs from school and jpgs of family members that are irreplaceable. So I am really hoping for a way to reverse the virus' effects.

Bot Obliterator
Quads
Posts: 13,248
Registered: ‎07-21-2008

Re: Ransomware PLEASE HELP

Let me say it again and add on.

 

If the Ransomware involved and it might not be this one on this thread uses encryption methods like the GPcode family there is no fix.

When the latest GPcode appeared people around the world looked at it no one could break it, and it was then workewd out with the speeds of todays PC's it would take 35- 40 years to break it.  Per infected PC.

 

I do not have a file to work with either.

 

Quads