Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Ransomware Decryption Tools
#1
Bug 
A tool for reversing the encryption process of CoinVault crypto-malware is currently available for download, with new decryption keys being added as the investigation advances. <source>


Reply

#2
I will sticky this topic
<left><form action="https://www.paypal.com/cgi-bin/webscr" method="post">If you are satisfied with my help, consider a donation. Thank you so much for your continued support! 
<input type="hidden" name="cmd" value="_s-xclick">
<input type="hidden" name="hosted_button_id" value="Y4ZDLXGFS4F8Q">
<input type="image" src="https://www.paypalobjects.com/en_US/GB/i/btn/btn_donateCC_LG.gif" border="0" name="submit" alt="PayPal — The safer, easier way to pay online.">
<img alt="" border="0" src="https://www.paypalobjects.com/en_GB/i/scr/pixel.gif" width="0" height="0">
</form>

   </div></left> 
Reply

#3
(04-15-2015, 12:33 PM)GuiltySpark Wrote:  
A tool for reversing the encryption process of CoinVault crypto-malware is currently available for download, with new decryption keys being added as the investigation advances. <source>



Hi GuiltySpark,
could you elaborate on this, for example would it be sensible to remove all other devices from the network for fear of infecting those computers ? Also where it says enter data here how exactly would a victim do that ? simply copy and paste a word document say ? Or how would someone enter their data ?

I thank you so much the heartache and stress this nasty ransomware causes is horrible

tmy
Reply

#4
Quote:    Hi GuiltySpark,
could you elaborate on this, for example would it be sensible to remove all other devices from the network for fear of infecting those computers ?  

Yes. Very sensible I have seen ransom ware spread through a network and destroy entire HDDs.



Quote: Also where it says enter data here how exactly would a victim do that ? simply copy and paste a word document say ? Or how would someone enter their data ?

When the "lock page" shows up telling you are infected, blah, blah encrypted blah...
At the top left of the "lock screen" is a tab / button saying view encrypted files list select this and you can highlight the files to check.

A full PDF explaining it is available on their site you can download it below.


.pdf   convault-decrypt-manual.pdf (Size: 341.43 KB / Downloads: 20)
Reply

#5
(09-18-2015, 12:18 PM)GuiltySpark Wrote:  
Quote:    Hi GuiltySpark,
could you elaborate on this, for example would it be sensible to remove all other devices from the network for fear of infecting those computers ?  

Yes. Very sensible I have seen ransom ware spread through a network and destroy entire HDDs.




Quote: Also where it says enter data here how exactly would a victim do that ? simply copy and paste a word document say ? Or how would someone enter their data ?

When the "lock page" shows up telling you are infected, blah, blah encrypted blah...
At the top left of the "lock screen" is a tab / button saying view encrypted files list select this and you can highlight the files to check.

A full PDF explaining it is available on their site you can download it below.

Hi GuiltySpark,

thank you for your help nasty stuff

regards

tmy
Reply

#6
looks like Eset just relase a decryto tool for tesla crypt  

as you can see here https://www.eset.co.uk/Press-Centre/News/Article/ESET-Releases-Decryptor-for-Recent-Variants-of-TeslaCrypt-Ransomware
Reply

#7
(05-20-2016, 12:21 AM)Peter_Dk Wrote:  looks like Eset just relase a decryto tool for tesla crypt  

as you can see here https://www.eset.co.uk/Press-Centre/News/Article/ESET-Releases-Decryptor-for-Recent-Variants-of-TeslaCrypt-Ransomware

Hi Peter Dk,
thank you for that, the number of these nasty ransomewares are getting out of hand

Kind regards

tmy
Reply

#8
(04-15-2015, 01:01 PM)Britec Wrote:  I will sticky this topic


Hi,

Recently my sister has been the victim of Cerber Ransomware, it deleted all shadow copies and restore points.

I tried to recover the files using ShadowExplorer and Recuva.
The first tool didn't work.
Recuva showed me most of the files but when I recovered them they were damaged.
Sadly, she didn't have backup of the files.

Do you know any Cerber Ransomware Decryption Tool?

Thank you in advance.
Reply

#9
(06-09-2016, 05:49 PM)cetycora Wrote:  
(04-15-2015, 01:01 PM)Britec Wrote:  I will sticky this topic


Hi,

Recently my sister has been the victim of Cerber Ransomware, it deleted all shadow copies and restore points.

I tried to recover the files using ShadowExplorer and Recuva.
The first tool didn't work.
Recuva showed me most of the files but when I recovered them they were damaged.
Sadly, she didn't have backup of the files.

Do you know any Cerber Ransomware Decryption Tool?

Thank you in advance.

Hi cetycora,
at this moment there are many different types of ransomware I'm not the best authority on this issue.
you could visit http://www.bleepingcomputer.com where they have got threads on this subject

it is changing all the time, with some keys having been released by the gang themselves, and others with law enforcement agency's
taking down websites and releasing the private keys.

I would start your own thread on this forum to get the best info

all the best

tmy
Reply

#10
Gents

I hope I am putting this in the right place

https://www.avast.com/ransomware-decryption-tools

Free Ransomware Decryption tools

Hope it helps
Reply



Forum Jump:


Users browsing this thread:
1 Guest(s)

Powered By MyBB, © 2002-2024 Melroy van den Berg.