kashani 0 Posted December 16, 2016 Report Share Posted December 16, 2016 hi my pc infected by attack my file incripted . it's new is *.b7e2 and old was *.mdf & *.zip & *.rar &... please help me how can i decript ? thanks Link to post Share on other sites
Kevin Zoll 309 Posted December 17, 2016 Report Share Posted December 17, 2016 Hello, I am not sure wich ransomware family you have fallen victim to. Download to your Desktop: - Emsisoft Emergency Kit - Farbar Recovery Scan Tool NOTE: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.NOTE: If you are unable to download the tools from the infected system, the tools can be saved to and run from a USB flash drive. All scans are to be run in Normal Mode. Do not run anything in "Safe Mode", unless you are instructed to do so by the Malware Removal Specialist handling your case. Do not force Safe Mode. Instructions on How to Boot to "Safe Mode" can be found at: http://www.malwarete...kb/SafeMode.php Let's get started: Install and Run Emsisoft Emergency Kit (EEK):Double click EmergencyKitScanner.exe to install EEK When the installation of EEK is complete the Emergency Kit scanner will run.NOTE: Make sure to enable PUPs detection. Click "Yes" to Update Emsisoft Emergency Kit Under "Scan" click-on "Malware Scan".IMPORTANT: Do not quarantine or delete anything. We just want the scan log without anything being quarantined or deleted. Save the scan log somewhere that you can find it. Exit Emsisoft Emergency Kit. Run Farbar Recovery Scan Tool (FRST):Double-click to run it. When the tool opens click Yes to disclaimer. Press Scan button. Farbar Recovery Scan Tool will produce the following logs: FRST.txt Addition.txt Create a new topic in our Help, my PC is infected! forum and attach the following logs to your post:Emsisoft Emergency Kit log (C:\EEK\Reports\) FRST.txt Addition.txt (NOTE: if you need to attach the logs to a reply to an existing topic, then you will need to use the More Reply Options button to the lower-right of where you type in your reply in order to see the controls for attaching files) The procedures contained in this thread are for this user and this user only. Attempting to use the instructions in this thread on your system could result in damaging the Operating System beyond repair. Do not use any of the tools mentioned in this thread without the supervision of a Malware Removal Specialist. Link to post Share on other sites
kashani 0 Posted December 17, 2016 Author Report Share Posted December 17, 2016 Hello. Result log in attach Please help me Scan_161214-121132.txt FRST.txt Addition.txt Link to post Share on other sites
kashani 0 Posted December 18, 2016 Author Report Share Posted December 18, 2016 Hello. Result log in attach Please help me Scan_161214-121132.txt FRST.txt Addition.txt Link to post Share on other sites
Kevin Zoll 309 Posted December 20, 2016 Report Share Posted December 20, 2016 After reviewing your logs, decryption of your files is not possible without paying the ransom. Link to post Share on other sites
kashani 0 Posted December 20, 2016 Author Report Share Posted December 20, 2016 How do I pay? Where? What links? Link to post Share on other sites
Kevin Zoll 309 Posted December 20, 2016 Report Share Posted December 20, 2016 All instructions for paying the ransom are in the ransom note. Link to post Share on other sites
Recommended Posts