• Content Count

  • Joined

  • Last visited

Community Reputation

0 Neutral

About Safa

  • Rank
    New Member
  1. Hi stapp, Thank you for your response. I have updated the topic with the result
  2. Dear Friends, My PC is infected with .zzzzzzzz extension virus and all the files are encrypted except windows files. Here is a sample rename 2zZr4U7pAAoZwXigBHkgXr0r3lMlFOXbEqmThk.zzzzzzzz of a encrypted file. My entire personal files are encrypted with .zzzzzzzz extension and original file name is replaced with letters/numbers for each file. My recently passed away father pictures/videos encrypted, I'm really helpless. I have attached a sample encrypted file and below listed the text message from the hacker. Kindly help me soon. Thank you. ========================================================= ---= Your files are now encrypted!! =--- Attention! All your files, documents, photos, databases and other important files are encrypted The only method of recovering files is to purchase an unique private decryptor. Only we can give you this decryptor and only we can recover your files. IN ORDER TO PREVENT DATA DAMAGE: * DO NOT MODIFY ENCRYPTED FILES * DO NOT CHANGE DATA BELOW * Do not rename encrypted files. * Do not try to decrypt your data using third party software, it may cause permanent data loss. * Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam. Now you should send us email with your key identifier and version. This email will be as confirmation you are ready to pay for decryption key. You have to pay for decryption in Bitcoins or Dash. The price depends on how fast you write to us. After payment we will send you the decryption tool that will decrypt all your files. If the payment isn't made with in 5 days the cost of decrypting files will be doubled We can give you free decryption as guarantee! Before paying you can send us up to 3 files for free decryption. The total size of files must be less than 100kb (non archived), and files should not contain valuable information (databases, backups, large excel sheets, etc.). You can contact us in these email address: ----- [email protected] ---or--- [email protected] ------ If you don't get a reply or if the email dies, then contact us using Bitmessage. Download it form here: Run it, click New Identity and then send us a message at BM-2cSzfawmdGKeT8ny99qtMeiGb27TcVBJXz I don't have Bitcoin (BTC) or DASH (DSH). How can I make the payment? * The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price: * Also you can find other places to buy Bitcoins and beginners guide here: * * * * * * Version: 1.1 Your Key Indentifier: +4IAAAAAAACqJ8aCHZJZA4AlBEOjZAri3vFtbTy9I4bZcqit1Xd1qbXv+FpXtZOmWxitnMqhODyLMSP0JjTfGzMKAMd7ZUvSVvq5 AXRFjuX6zYhQx3+WRZ=OXgKT2NpUgqayRy0c0fmbIDWv9mPa6inDn90ZWv8X0usbuK+2+vNbn4NqZ0+0Wt6HtUDGFEuotSq+ByJe KDKBw6QZeQPx8vSGQ47lOy3LsxZspVGGEptPYpVCzukA9EpfYp0ZNvLqZZT6q4JfYK=iYJBuphhkHUtIDNkxdRAdEJQ1ayd8K3EE sTUgifjkBjVWC3qiv8ibKkFAdlyI53qE3RqyRR9XWBGpe7AEvPHFphPGDtxy3qB143xQ3QBtNpEp7N1M1FZlEGTYp5MKmNR6EPc5 bPD8Xb+N1X5kM5EGEnkQZsI29gER3Q ========================================================= 2zZr4U7pAAoZwXigBHkgXr0r3lMlFOXbEqmThk.zzzzzzzz Here is the result 1 Result Scarab This ransomware may be decryptable under certain circumstances. Please refer to the appropriate guide for more information. Identified by custom_rule: Encrypted size marker [0x00 - 0x08] 0x1004000000000000 Click here for more information about Scarab