NEED VIRUS RANSOM SCREEN ID FOR (I.V.) and METHOD PLEASE!!!

Tech Outpost
1
  1. as you might be aware the private key is used in the RSACryptoServiceProvider class .net and

  2. files are encrypted with AES-256 bit using the RijndaelManaged class.

  3.  

  4. This is the structure of the encrypted files:

  5.  

  6. - 32 bit integer, header length

  7. - byte array, header (length is previous int)

  8. *decrypt byte array using RSA & private key.

  9.  

  10. Decrypted byte array contains:

  11. - 32 bit integer, IV length

  12. - byte array, IV (length is in previous int)

  13. - 32 bit integer, key length

  14. - byte array, Key (length is in previous int)

  15.  

  16. - rest of the data is the actual file which can be decrypted using Rijndaelmanaged and the IV and KEY