Like I said No
You also don't grasp the cocept of what to do if files are that important, or realise about AES256.
Quads
For people who have had ransomware that has done the likes of created a encryped version then it has deleted the original version I have found this, not as good as the pro stuff, or advanced, but it is free http://www.easeus.com/datarecoverywizard/free-data-recovery-software.htm#1
It is advised that install the program on the drive you are not going to scan,
Quads
Hi Quads,
I have recently been infected with a similar malware that turned my documents and photos to ".crypt" files. I only did a scan with MS Security Essentials which detected nothing and have not done anything further to remove the virus. I'm a afraid anything I do could reduce my chance of recovering my files. I still have the black popup message on my desktop (I'm using a different computer for now by the way).
Should I go ahead to run the decryption free data recovery tool you have just posted, or do have suggestion I should follow?
File recovery is really my first priority and I can deal with removing the ransomware after. Will greatly appreciately your help on this!
Hello
I am from the creator of this virus. I would like to inform you that you will not get help in deciphering the files or on this forum, on any else. Decrypt files can only know the password and nothing else. This password will only know we are!
With regard to the program which has provided Quads... it worked because of errors in the first version of the virus. This error occurs very rarely and was immediately corrected.
I would also like to inform you that we occasionally reset our database and after a reset to restore your data will not be able to no one. If your files you really need them you have a last chance.
Best Regards
One user was able to recover the photos, without the ID or Password so Data Recovery software works especially better data recovery software than PhotoRec and Testdisk.
Quads
NO. User restored a photo removed or moved from the computer before virus influence. Restore files removed with a virus it is impossible.
DecryptMe wrote:NO. User restored a photo removed or moved from the computer before virus influence. Restore files removed with a virus it is impossible.
Of couse people bad like you would say that to try and get users to pay $50 - $150 to you.
I went back and re read the posts in question and no they used the photo recovery program to recover the photos from the former infected drive in question but it's only to recover pic file formats not other document types. that is why they are still having to find another way for documents and .pdf's etc. that post
I explained my situation in the message I sent you. I had a family issue that required me to rush and retrieve photos that were lost. I followed every rule you required. I went away due to a family request for photos. I was always keeping in mind your warnings. I only used photorec to get the photos. I followed every other rule you said to follow. I did all the steps. I knew it wasnt the solution but I desperately needed the photos. I always intended to come back here to see the full solution from you. So I'm sorry. I would just like to know what I can do to get the work docs and pdfs that are very important for my job.
Data recovery software does work, although I am using professional programs.
Quads
It is true, the photos are recoverable. In all, I recovered about 1000 photos. So only docs, txts, pdfs are in trouble. The person, if you can say that about them because only a heartless person can hurt others, who says they created the virus, should be banned from this forum, and banned from the internet. He should be reported to interpol and be sought after and arrested. I wonder if him posting on here can help the proper authorities track him down using his ip. The person isnt really a person, he is a heartless joke and a piece of dirt that no one wants to touch with a long wooden stick. He should be helping others, spreading good because what you give out will always come back to you.
Here is a screenshot of software to look for other file formats.
Quads
what is the difference between the free download and the upgrade version?
maybe not so many file types to choose from, the free version according to EASEUS website has a 1GB limit
There is alot of info on their free version product page.
I have other software tan this that allows me to add in manually filesets and offsets.
Quads
Although it is called "PhotoRec", it should also recover documents and pdf's.
http://www.cgsecurity.org/wiki/File_Formats_Recovered_By_PhotoRec
Dave
http://www.securelist.com/en/descriptions/old313444
Though does not compare to the pro software in it's finding / scanning ability
Quads
Quads wrote:http://www.securelist.com/en/descriptions/old313444
Though does not compare to the pro software in it's finding / scanning ability
Quads
No, of course not.
I just wanted to point that out since the user has the program installed and must be familiar with using it since it worked fine for the pictures.
Dave
i will try the program tomarrow after work. thank you Quads.
I just wanted to say thanks to all the contributors on this site. I like everyone else was infected on Thursday 6-13-12. My ID to send was 250. I've been reading every thread and following every link to figure out how to decrypt my files. This afternoon I found a huge flaw in Mr. DecryptMe's program. I've recovered everyone of my files and didn't pay him a dime. I can't say what I did will work for everyone but it certainly worked for me.
Because I know DecryptMe may be monitoring this thread I am choosing not to post my solution. I will instead PM Quads and let him determine if it should be posted.
I'm concerned if I post this simple fix DecryptMe will close this loophole.
Thanks again to everyone
so... where is the fix?
I'm sure more people are waiting too. There's so many valuable documents that I need to recover... =(
I have given all the fixes available, including the fact data recovery software works and so does it appear PhotoRec, I gave a link to the page with screenshots.
There is a reason why PhotoRec and Data Recovery software works.
Go back through a few pages.
You could always go and pay for a tech with data recovery software.
Quads
I was talking about the fix from the guy above me that said he would pm you with a solution that worked for him.
I tried both data recovery and PhotoRec.
None of them was able to recover my txt. files (photorec recovered only SOME of my photos but the txt. files came back all corrupted with weird writings in it)
EaseUS Data Recovery failed to both filetypes and was only able to find the "Warning" txt. that the ransomware have left in diversed places.
Please help. I can live without the rest of the photos... but the thousands of txts that I got...
The data recovery software does work. just use it correctly or get someone who know how to use the software correctly, like for instance run data recovery software from another hard drive so that the hard drive that needs files recovered is not booted and in use.
"Please help. I can live without the rest of the photos... but the thousands of txts that I got..." No backups, must mean you can live without all.
users get warned for years to back up data.
Quads