handtrix

@bruticus0 thanks! the brilliant idea of getting an original file is such a big help. I will follow your advice.

Hi there again! My computer had been infected with RSA 1024 a.k.a. Nemucod 5 days ago. (below is a decrypt letter) I did not pay the perpetrators for a code. I already seek advice from experts and nothing solved. I was adviced to use emsisoft decryptor but I couldn't find a original uncrypted file to drag unto the icon together with an identical crypted version. All I can see all over my PC are crypted files. I tried renaming, & restore system still nothing happend. When I double click a file to open, only codes will apear. So today, after 5 days from the date of infection. When I open my PC "I CAN'T LOG INTO WINDOWS PERSONAL ADMINISTRATIVE ACCOUNT" i know the password but it says its wrong. I wanna know if this an aftermath of not solving the infection after 3 days as they threaten me on the letter? WHAT ARE THE WORSE THINGS THAT COULD HAPPEN AFTER UNSOLVED NEMUCOD? What can I do? May I be able to open my user account ever again? or is there any means I may be able to retrieve my file? PLEASE HELP! ----------------------- ATTENTION! All your documents, photos, databases and other important personal files were encrypted using strong RSA-1024 algorithm with a unique key. To restore your files you have to pay 0.20556 BTC (bitcoins). Please follow this manual: 1. Create Bitcoin wallet here: https://blockchain.info/wallet/new 2. Buy 0.20556 BTC with cash, using search here: https://localbitcoins.com/buy_bitcoins 3. Send 0.20556 BTC to this Bitcoin address: 15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR 4. Open one of the following links in your browser to download decryptor: http://minneapolisarborist.com/counter/?15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR http://dophotography.nyc/counter/?15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR http://boris-nikitin.ru/counter/?15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR http://abv-mebelshop.ru/counter/?15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR http://boom71.ru/counter/?15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR 5. Run decryptor to restore your files. PLEASE REMEMBER: - If you do not pay in 3 days YOU LOOSE ALL YOUR FILES. - Nobody can help you except us. - It`s useless to reinstall Windows, update antivirus software, etc. - Your files can be decrypted only after you make payment. - You can find this manual on your desktop (DECRYPT.txt).

Hi Sarah, I already did this steps but i couldn't find an uncrypted copy of my files. all of them are already crypted. I wont be able to run the decrypter.

Could anybody please help? My PC is infected with RSA -1024 with this message.... I badly needed help. ATTENTION! All your documents, photos, databases and other important personal files were encrypted using strong RSA-1024 algorithm with a unique key. To restore your files you have to pay 0.20556 BTC (bitcoins). Please follow this manual: 1. Create Bitcoin wallet here: https://blockchain.info/wallet/new 2. Buy 0.20556 BTC with cash, using search here: https://localbitcoins.com/buy_bitcoins 3. Send 0.20556 BTC to this Bitcoin address: 15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR 4. Open one of the following links in your browser to download decryptor: http://minneapolisarborist.com/counter/?15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR http://dophotography.nyc/counter/?15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR http://boris-nikitin.ru/counter/?15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR http://abv-mebelshop.ru/counter/?15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR http://boom71.ru/counter/?15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR 5. Run decryptor to restore your files. PLEASE REMEMBER: - If you do not pay in 3 days YOU LOOSE ALL YOUR FILES. - Nobody can help you except us. - It`s useless to reinstall Windows, update antivirus software, etc. - Your files can be decrypted only after you make payment. - You can find this manual on your desktop (DECRYPT.txt). Addition.txt FRST.txt

Hi! My PC is infected with this. I was able to follow an instruction from another thread related to this problem. Here is my generated files. ----------------------------------------------------------------------------------------------------------------------------------------------- ATTENTION! All your documents, photos, databases and other important personal files were encrypted using strong RSA-1024 algorithm with a unique key. To restore your files you have to pay 0.20556 BTC (bitcoins). Please follow this manual: 1. Create Bitcoin wallet here: https://blockchain.info/wallet/new 2. Buy 0.20556 BTC with cash, using search here: https://localbitcoins.com/buy_bitcoins 3. Send 0.20556 BTC to this Bitcoin address: 15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR 4. Open one of the following links in your browser to download decryptor: http://minneapolisarborist.com/counter/?15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR http://dophotography.nyc/counter/?15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR http://boris-nikitin.ru/counter/?15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR http://abv-mebelshop.ru/counter/?15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR http://boom71.ru/counter/?15b3KTBda2ZPjXvt9qdF3jwDRSjS5bpdzR 5. Run decryptor to restore your files. PLEASE REMEMBER: - If you do not pay in 3 days YOU LOOSE ALL YOUR FILES. - Nobody can help you except us. - It`s useless to reinstall Windows, update antivirus software, etc. - Your files can be decrypted only after you make payment. - You can find this manual on your desktop (DECRYPT.txt). Addition.txt FRST.txt