Nine Years of Service
Posts: 183
Threads: 40
Ransomware 11-17-2016, 04:47 AM
#1
I just got a text from my buddy from class and he's asking for help, he was recently attacked by a hacker and the hacker basically encrypted everything on his computer and asked for a form of payment in bitcoin. All he really wants back are his pictures is there anything i can do to help him? or counter the attack so he doesn't have to pay? If you need more information i can get it
•
Ten Years of Service
Posts: 3,133
Threads: 261
RE: Ransomware 11-17-2016, 08:08 AM
#2
I am not experienced in the removal of Ransomware but try looking for some keys on the internet. Just search "nameofransomware here ransomware keys" on Google and you might get a key.
If not, you can try to disconnect from the internet, get farbar recovery scan tool with USB from a different computer to the infected computer and then let it scan on the infected computer and look through the logs for anything suspicious.
If you fail to remove it, I suggest hiring some IT guy to look at your computer.
The last option is factory resetting.
All up to your friend.
Ten Years of Service
Posts: 4,466
Threads: 227
RE: Ransomware 11-17-2016, 10:30 AM
#3
I dealt with this with my client the other day and was paid $150 in full. xD
Nine Years of Service
Posts: 2
Threads: 0
RE: Ransomware 11-17-2016, 11:59 AM
#4
You can try a decrypter, because most Ransomware has one by now. You just need to put it on a USB or something to get it on the computer.
Nine Years of Service
Posts: 15
Threads: 2
RE: Ransomware 11-19-2016, 12:53 AM
#5
If this still isnt solved, send me (or post) a picture of the message asking for the bitcoins and give an encrypted file, i may be able to tell you which ransomware he got encrypted by and, if applicable, send you the decrypter
Jabber: fuhrer@0day.ms
I2P-Bote:
Code:
lLX7Z6LDnFbHc67Kv9GR3YCDAfSot7vNy1g2jwUNFhKGgwksYk8Y6bGQnRRiMfQHQvSM0yheDlWEhFpmSoW7MH9oYSrNVHoMbwRxu2jib2DS-OzbmUKlVzmOuyfRARnK7vinu78aYhCqH9eeJhwvk4JNtBEhD2K1hzpGeXxkDu3Zct
•
Nine Years of Service
Posts: 28
Threads: 1
RE: Ransomware 11-19-2016, 04:25 PM
#6
Could you upload an example of an encrypted file? I suspect that the ransomware that your friend have experienced is just a rebranded variant of some other family, and it's hard to find any info about the particular variant without looking at an example file.
•
Ten Years of Service
Posts: 3,024
Threads: 155
RE: Ransomware 11-19-2016, 04:51 PM
#7
Could you maybe include what Ransomware is used, or what it's called? Maybe a sample file would be nice, would love to try to reverse engineer it in my free time.
~~ Might be back? ~~
•
Nine Years of Service
Posts: 183
Threads: 40
RE: Ransomware 11-19-2016, 06:21 PM
#8
I'm trying to get him to send me a picture of it or something so i have some idea of what he is experiencing
•
Thirteen Years of Service
Posts: 2,267
Threads: 132
RE: Ransomware 11-19-2016, 10:20 PM
#10
There is nothing he can do. He cannot beat mathematics. His files are gone.
•