Mr. B Posted September 8, 2014 #1 Posted September 8, 2014 (edited) Your documents, photos, databases and other important files have been encrypted with strongest encryption and unique key, generated for this computer. Private decryption key is stored on a secret Internet server and nobody can decrypt your files until you pay and obtain the private key. If you see the main locker window, follow the instructions on the locker. Overwise, it's seems that you or your antivirus deleted the locker program. Now you have the last chance to decrypt your files. 1. Type the address Hidden Content Give reaction to this post to see the hidden content. in your Internet browser. It opens the Tor site. 2. Press 'Download Tor', then press 'DOWNLOAD Tor Browser Bundle', install and run it.\ 3. Now you have Tor Browser. In the Tor Browser open the Hidden Content Give reaction to this post to see the hidden content. Note that this server is available via Tor Browser only. Retry in 1 hour if site is not reachable. 4. Copy and paste the following public key in the input form on server. Avoid missprints. Q36CN7-T4CAFS-SRLYW5-77U4ZS-TXYW4A-WAJLPV-IXZ5XV-HOOUS2 6MDQJZ-MYFJVD-RMBGKV-TM2DTE-METLR3-SKMCC3-MHAIDN-VC7SJQ FTT3VY-JDMUKB-LWFK7T-RZN3MC-O57WPI-5GDCDU-7DIWPD-XZVP4N 5. Follow the instructions on the server. ------------------------------------------------------------------------------------- Anyone know how to delete this Trojan/virus???????? Note: I don't need the encoded files Edited September 8, 2014 by Mr. B
SuperModerator BamSec1 Posted September 8, 2014 SuperModerator #2 Posted September 8, 2014 Tor Onion is a browser to access torrentz like ThePiratBay.org. Damn the buggers who annoy people with this! I wish I could help you, Mr. B. 1
Andr Legend s33m33 Posted September 9, 2014 Andr Legend #3 Posted September 9, 2014 Maybe this can help - http://forum-andr.net/topic/28888-mistake-in-ransomware-program-leaves-decryption-key-accessible/ 1
Administrator draww Posted September 10, 2014 Administrator #4 Posted September 10, 2014 1) if that's the case as s33m33 pointed out, here's a detailed tutorial on how to remove it Hidden Content Give reaction to this post to see the hidden content. 2) in most cases Malwarebytes Anti-Malware will remove most of the malware. You can find it here (since you said you don't need the encoded files, this'll be the quickest way) http://forum-andr.net/topic/32162-malwarebytes-anti-malware-premium-2021012-multilanguage/ 1 1
Mr. B Posted September 12, 2014 Author #5 Posted September 12, 2014 I believe I got rid of the infection and will restore my system to get rid of the crap left behind.. Thanks for all the help. No nice way to handle the cleanup except with a backup......
humble3d Posted September 15, 2014 #6 Posted September 15, 2014 (edited) Hidden Content Give reaction to this post to see the hidden content. Cryptolocker Prevention Kit (updated) Hidden Content Give reaction to this post to see the hidden content. The SMBKitchen Crew and Third Tier staff have put together a group materials that were published as part of our SMBKitchen Project and only available to subscribers. However because this virus is spreading so rapidly and is so serious we’ve decided to make these materials available to everyone. The kit includes an article on cleaning up after infection but more importantly provides materials and instruction for deploying preventative block using software restriction policies. The articles provide instruction for installing them via GPO on domain computers and terminal servers, and non-domain joined machines too. We have also provide GPO settings that you can important into your environment. We’ve zipped it up into a single file. Hidden Content Give reaction to this post to see the hidden content. Hidden Content Give reaction to this post to see the hidden content. If you find this kind of material useful considering joining the SMBKitchen Project. You can find out more about us at Hidden Content Give reaction to this post to see the hidden content. Why is My Opera shut down?Opera offers two reasons why the service is shut down. The company notes that other social media and blogging services offer "more and better" features, and that it cannot keep up with that. In addition, the resources needed to maintain My Opera have changed the company's "outlook on My Opera".Time to export your dataIf you operate a My Opera blog or have an account, you have until the shut down date to export your data.Opera has created several help guides that walk users through the necessary steps.Opera blog owners can move their blog to other blogging services such as WordPress, Squarespace, Typepad or Moveable Type.To do so, they need to perform the following operation:Log in to the My Opera websiteHover the mouse over the wrench icon and select account.Click on Blog settingsClick on export your blog there.To download all files that you have uploaded to My Opera, perform the following operation:Hover the mouse over the wrench icon and select filesSelect Zip your files and click Start.Other changesThe desktop team blog will be moved to a new blogs subdomain on the Opera website where you can access it.Opera Link, the company's data synchronization service will also be moved to a subdomain on the Opera website.The forums will be moved to Opera.com in the future as well, with the most important threads migrated to the new destination as well.My Opera users can continue to use their login information to sign in on the Opera website to participate in the forums just like they have done before.Closing WordsIt is clear that Opera Software is trying to streamline its portfolio after the move to Chromium. While services such as My Opera or Fastmail may not have been profitable, or worth the effort in the eyes of Opera Software, long standing users may see this in a different light.My Opera was the place to hang out for Opera users and to meet like-minded fellows. Removing that option may impact the strong sense of community in a negative way, which may have consequences that Opera Software did not anticipate. MORE: Hidden Content Give reaction to this post to see the hidden content. Edited September 15, 2014 by humble3d 2
Mr. B Posted September 23, 2014 Author #7 Posted September 23, 2014 humble3d Thanks for the info. Will be using it......
Recommended Posts