Abiyan

Infected PC files with Ransomeware

Recommended Posts

Dear Kevin,

Thank you so much for your reply. I have tried the decryption tool twice but didn't able to get the Decryption key.

What i did is that i select the infected file and rename it to remove the added extension. I select both the file and drop it on Decryption tool, it took almost 2 hours to process the file and then the system shows "No key found for your system".

Kindly can you please help where i am doing wrong???

Your earliest reply will be highly appreciated.

Thank you in advance,

Ali

Share this post


Link to post
Share on other sites

Renaming an infected file to its original name is not going to work.  You need a copy of the original file and its encrypted counterpart.

Share this post


Link to post
Share on other sites

Dear Kevin,

Attached please find the message we got when we try to decrypt the infected file.

Please help me for this matter as the data is long time effort, i hope you understand.

Thank you in advance,

Ali

Xorist infection.pdf

Share this post


Link to post
Share on other sites

One important thing i forgot to mention is that we don't have any original files left in the system. Most of the files except some are now infected and encrypted so that's why i am not able to give decryptor the combination of files . . . . . . . :(

Share this post


Link to post
Share on other sites

Without a copy of an original file and its encrypted counterpart, there is no way to decrypt the files.

Share this post


Link to post
Share on other sites

This is big shock for me because i see no original files in the hard drives. I even checked for hidden files but there is no hidden files. Is it mean that the group or the person who infected our systems have the original files with them?????

Please tell me any possible way to recover it even if it is available with payment. Thank you so much for your time and attention.

I am anxiously looking forward to hear from you soon.

Regards / Ali

Share this post


Link to post
Share on other sites

When files are encrypted the originals are securely erased from the drive.  Unless, you have copies of files on removable media that have not been encrypted, then your files cannot be decrypted.

Share this post


Link to post
Share on other sites

Thank you so much for your support, time and attention. May Allah bless you with the best of health, wealth and happiness. Aameen

Share this post


Link to post
Share on other sites
Guest
This topic is now closed to further replies.

  • Recently Browsing   0 members

    No registered users viewing this page.