Jump to content

Ransomware infection


Recommended Posts

Posted (edited)

Your documents, photos, databases and other important files have been encrypted


 


with strongest encryption and unique key, generated for this computer.


 


 


Private decryption key is stored on a secret Internet server and nobody can


 


decrypt your files until you pay and obtain the private key.


 


 


If you see the main locker window, follow the instructions on the locker.


 


Overwise, it's seems that you or your antivirus deleted the locker program.


 


Now you have the last chance to decrypt your files.


 


 


1. Type the address

Hidden Content

    Give reaction to this post to see the hidden content.
in your Internet browser.

 


   It opens the Tor site.


 


 


2. Press 'Download Tor', then press 'DOWNLOAD Tor Browser Bundle',


 


   install and run it.\


 


 


3. Now you have Tor Browser. In the Tor Browser open the

Hidden Content

    Give reaction to this post to see the hidden content.

 


   Note that this server is available via Tor Browser only.


 


   Retry in 1 hour if site is not reachable.


 


 


4. Copy and paste the following public key in the input form on server. Avoid missprints.


 


Q36CN7-T4CAFS-SRLYW5-77U4ZS-TXYW4A-WAJLPV-IXZ5XV-HOOUS2


 


6MDQJZ-MYFJVD-RMBGKV-TM2DTE-METLR3-SKMCC3-MHAIDN-VC7SJQ


 


FTT3VY-JDMUKB-LWFK7T-RZN3MC-O57WPI-5GDCDU-7DIWPD-XZVP4N


 


5. Follow the instructions on the server.


 


-------------------------------------------------------------------------------------


 


Anyone know how to delete this Trojan/virus????????


 


Note: I don't need the encoded files


Edited by Mr. B
  • SuperModerator
Posted

Tor Onion is a browser to access torrentz like ThePiratBay.org.

Damn the buggers who annoy people with this!

I wish I could help you, Mr. B. :(

  • Like 1
  • Administrator
Posted

1) if that's the case as s33m33 pointed out, here's a detailed tutorial on how to remove it


Hidden Content

    Give reaction to this post to see the hidden content.

2) in most cases Malwarebytes Anti-Malware will remove most of the malware. You can find it here (since you said you don't need the encoded files, this'll be the quickest way)


 


http://forum-andr.net/topic/32162-malwarebytes-anti-malware-premium-2021012-multilanguage/


  • Like 1
  • Thanks 1
Posted

I believe I got rid of the infection and will restore my system to get rid of the crap left behind..


 


Thanks for all the help.


 


No nice way to handle the cleanup except with a backup...... 


Posted (edited)

Hidden Content

    Give reaction to this post to see the hidden content.

Cryptolocker Prevention Kit (updated)

 

Hidden Content

    Give reaction to this post to see the hidden content.

 The SMBKitchen Crew and Third Tier staff have put together a group materials that were published as part of our SMBKitchen Project and only available to subscribers. However because this virus is spreading so rapidly and is so serious we’ve decided to make these materials available to everyone.

 The kit includes an article on cleaning up after infection but more importantly provides materials and instruction for deploying preventative block using software restriction policies. The articles provide instruction for installing them via GPO on domain computers and terminal servers, and non-domain joined machines too. We have also provide GPO settings that you can important into your environment.

 We’ve zipped it up into a single file.

Hidden Content

    Give reaction to this post to see the hidden content.

Hidden Content

    Give reaction to this post to see the hidden content.

 If you find this kind of material useful considering joining the SMBKitchen Project. You can find out more about us at

Hidden Content

    Give reaction to this post to see the hidden content.

Why is My Opera shut down?

Opera offers two reasons why the service is shut down. The company notes that other social media and blogging services offer "more and better" features, and that it cannot keep up with that. In addition, the resources needed to maintain My Opera have changed the company's "outlook on My Opera".

Time to export your data

If you operate a My Opera blog or have an account, you have until the shut down date to export your data.

Opera has created several help guides that walk users through the necessary steps.

Opera blog owners can move their blog to other blogging services such as WordPress, Squarespace, Typepad or Moveable Type.

To do so, they need to perform the following operation:

Log in to the My Opera website

Hover the mouse over the wrench icon and select account.

Click on Blog settings

Click on export your blog there.

To download all files that you have uploaded to My Opera, perform the following operation:

Hover the mouse over the wrench icon and select files

Select Zip your files and click Start.

Other changes

The desktop team blog will be moved to a new blogs subdomain on the Opera website where you can access it.

Opera Link, the company's data synchronization service will also be moved to a subdomain on the Opera website.

The forums will be moved to Opera.com in the future as well, with the most important threads migrated to the new destination as well.

My Opera users can continue to use their login information to sign in on the Opera website to participate in the forums just like they have done before.

Closing Words

It is clear that Opera Software is trying to streamline its portfolio after the move to Chromium. While services such as My Opera or Fastmail may not have been profitable, or worth the effort in the eyes of Opera Software, long standing users may see this in a different light.

My Opera was the place to hang out for Opera users and to meet like-minded fellows. Removing that option may impact the strong sense of community in a negative way, which may have consequences that Opera Software did not anticipate.

 

MORE:

Hidden Content

    Give reaction to this post to see the hidden content.
Edited by humble3d
  • Like 2
Posted

humble3d


 


Thanks for the info. Will be using it......

×
×
  • Create New...