User avatar
pclab
Forum Moderator
Posts: 1648
Joined: Tue Jan 13, 2015 4:55 pm
Contact: Website Facebook

Decrypt Cryptolocker

Fri May 08, 2015 7:44 am

Hey

Just got another call from a client that got his files encrypted...
Still no solution, right??

Thanks
www.pclab.com.pt
facebook.com/PCLAB.Assistencia.Tecnica

User avatar
Jared
Forum Admin
Posts: 3584
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

Re: Decrypt Cryptolocker

Fri May 08, 2015 8:31 am

Not really. If it's Windows Pro you can try the previous versions feature of the individual folders that contain the lost data (assuming they had it enabled). Or you can run RAW scan and see what you're able to get. But, as far as decrypting is concerned, you'll need to pay the criminals.

Unless of course it's the actual original Cryptolocker virus (which I doubt) in which case you can get the decryption key here: https://www.decryptcryptolocker.com/

User avatar
lcoughey
Forum Moderator
Posts: 612
Joined: Mon Jan 12, 2015 12:46 pm
Location: Ontario, Canada
Contact: Website Facebook Twitter Google+

Re: Decrypt Cryptolocker

Fri May 08, 2015 8:54 am

Of course, if it is cryptolocker 3.0, there is nothing you can do except pay the ransom, as I mentioned in a post on my forum.

http://www.recoveryforce.com/forums/vie ... b8792#p172

User avatar
pclab
Forum Moderator
Posts: 1648
Joined: Tue Jan 13, 2015 4:55 pm
Contact: Website Facebook

Re: Decrypt Cryptolocker

Fri May 08, 2015 10:58 am

He had tried to send one file to https://www.decryptcryptolocker.com/, but it says it's not a valid file or something like that.
So it must be another version.
He doesn't have the shadow copies activated, so he's willing to pay.
But another question comes up: he needs to pay by Bitcoin. What service do you suggest to pay using Bitcoins? I never made any payment...

Thanks
www.pclab.com.pt
facebook.com/PCLAB.Assistencia.Tecnica

User avatar
Jared
Forum Admin
Posts: 3584
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

Re: Decrypt Cryptolocker

Fri May 08, 2015 1:39 pm

I use coinbase.com they seem reputable, have good rates, and I've never had a problem with them.

hddguy
Data Recovery Novice
Posts: 94
Joined: Thu Jan 22, 2015 8:21 am

Re: Decrypt Cryptolocker

Tue Jul 07, 2015 11:01 am


User avatar
Jared
Forum Admin
Posts: 3584
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

Re: Decrypt Cryptolocker

Tue Jul 07, 2015 12:18 pm

I think that only removes the virus, I don't think it's any use for decrypting the data though.

User avatar
pclab
Forum Moderator
Posts: 1648
Joined: Tue Jan 13, 2015 4:55 pm
Contact: Website Facebook

Re: Decrypt Cryptolocker

Tue Jul 07, 2015 1:56 pm

It says:
The Ransomware Removal Kit includes abilities of the following ransomware removal tools:

CoinVault: CoinVault ransomware removal tools
CryptoLocker: CryptoLocker removal tools and Threat Mitigation
CryptoLockerDecrypt: FireEye Tool to decrypt files encrypted by the CryptoLocker ransomware
FBIRansomWare: FBIRansomWare Removal Tools
TeslaCrypt: Tool for removing this variant of CryptoLocker ransomware
TrendMicro_Ransomware_RemovalTool: General ransomware removal tool from TrendMicro

I will test it. I still have a case here.
www.pclab.com.pt
facebook.com/PCLAB.Assistencia.Tecnica

MrAnderson
Data Recovery Noob
Posts: 1
Joined: Sat Oct 31, 2015 5:04 pm

Re: Decrypt Cryptolocker

Sat Oct 31, 2015 5:11 pm

pclab wrote:Hey

Just got another call from a client that got his files encrypted...
Still no solution, right??

Thanks


Hello

Try this special guide :idea:

User avatar
Jared
Forum Admin
Posts: 3584
Joined: Mon Jan 12, 2015 12:32 pm
Location: Providence, RI
Contact: Website Facebook Twitter Skype YouTube Google+

Re: Decrypt Cryptolocker

Sat Oct 31, 2015 7:04 pm

Yes, but if they only have Windows basic or home, not pro you can't roll back to previous versions.

Return to “Cyber Security & Malware”

Who is online

Users browsing this forum: No registered users and 0 guests