cdv2014

CryptoDefense Decryption

Recommended Posts

Dear Sir or Madam,

 

If a computer was recently hit by CryptoDefense and there was no RSA key in the users' folders on the PC (even after trying file recovery), but there are some old backups of infected files, is it possible somehow by comparing 1 or more pairs of files to calculate the key used for encryption?

 

Thank you in advance and kind regards

Share this post


Link to post
Share on other sites

Hopefully, one of those old backups is an image backup? Just restore from the image backup and your good to go. BTW - image backup is the easiest and most effective mitigation strategy against this type of malware.

Share this post


Link to post
Share on other sites

No, unfortunately that isn't possible due to the way encryption takes place. Unless the backup contains uninfected files unfortunately there is no way to recover the files without decryption key.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.