kylee 0 Posted April 29, 2016 Report Share Posted April 29, 2016 Dear Support, I facing auto_locky not working error 'The decrypter could not determine a valid key for your system' Kindly assist!!! Thank you Link to post Share on other sites
Elise 276 Posted April 29, 2016 Report Share Posted April 29, 2016 Hello Kylee, I am sorry to hear about this. To determine what variant you are facing and whether or not decryption is possible, can you please tell me how encrypted files look (what names do they have) and what the name and content of the ransom notes is? Link to post Share on other sites
kylee 0 Posted April 29, 2016 Author Report Share Posted April 29, 2016 Dear Elise, Please assist all my documents encrypted file name as *.locky e.g. D0B18A6D5337BFA681F138149CB027F9.locky +$$$~=-+++.~~=*|-$+~$|=_=|--*~=$.|~._-=-+*~$+-=~-~|. !!! IMPORTANT INFORMATION !!!! All of your files are encrypted with RSA-2048 and AES-128 ciphers.More information about the RSA and AES can be found here: http://en.wikipedia.org/wiki/RSA_(cryptosystem) http://en.wikipedia.org/wiki/Advanced_Encryption_Standard Decrypting of your files is only possible with the private key and decrypt program, which is on our secret server.To receive your private key follow one of the links: 1. http://32kl2rwsjvqjeui7.tor2web.org/D0B18A6D5337BFA6 2. http://32kl2rwsjvqjeui7.onion.to/D0B18A6D5337BFA6 3. http://32kl2rwsjvqjeui7.onion.cab/D0B18A6D5337BFA6 If all of this addresses are not available, follow these steps: 1. Download and install Tor Browser: https://www.torproject.org/download/download-easy.html 2. After a successful installation, run the browser and wait for initialization. 3. Type in the address bar: 32kl2rwsjvqjeui7.onion/D0B18A6D5337BFA6 4. Follow the instructions on the site. !!! Your personal identification ID: D0B18A6D5337BFA6 !!!.$~-*=_=+=.$==|*-|-.+.$-=+=~**$_====|+|$|--$~+++$~|+ Thank you, Link to post Share on other sites
Elise 276 Posted April 29, 2016 Report Share Posted April 29, 2016 Hello, Unfortunately decryption is not possible for this variant. I can help you remove any active component of the infection, but due to the way this malware encrypts files, there is nothing we can do about the affected files. Link to post Share on other sites
Kevin Zoll 309 Posted May 4, 2016 Report Share Posted May 4, 2016 Thread Closed Reason: Lack of Response PM either Kevin, Elise, or Arthur to have this thread reopened. All posters requesting Malware Removal assistance are required to follow all procedures in the thread titled START HERE if you don't we are just going to send you back to this thread. Link to post Share on other sites
Recommended Posts