Dicky

My computer infected ransomware

Recommended Posts

HI

 

My Computer infected ransomware , all the file & folder encrypted in rar extentsion, can you help me to decrypt it.

attach some encrypted and non-encrypted same file and the ransomware notice for your reference.

 

Thanks a lot

Dicky

ffastun.ffa.rar

ffastun.ffl.rar

ffastun.ffo.rar

ffastun0.rar

ffastunT.rar

Lo.rar

README_README_README_README.txt

ffastun.ffa

ffastun.ffl

ffastun.ffo

ffastun0.ffx

ffastunT.ffl

Lo.xls

Share this post


Link to post
Share on other sites

Hi Dicky,

Do you have any more information, like how you got this ransomware, or if you have the malware file which caused this, then that would be great.

Regards,

Sarah

Share this post


Link to post
Share on other sites
On 2017/2/26 at 6:58 AM, Sarah W said:

Hi Dicky,

Do you have any more information, like how you got this ransomware, or if you have the malware file which caused this, then that would be great.

Regards,

Sarah

Hi Sarah

I don't know the reason why we got this ransomware, may be the hacker hack in my server, and I can not find the malware file, I already use the redegit to check the registry, can not find any file like malware.

My server all the folder and file, like documents and settings, program file and backup folder, all change to rar file, and shadow copies also deleted.  And all folders have the readme file from malware,  I only have some backup file at 2nd January, 2017, so I only can provide more pairs of the file to you.

Thanks for your help

Dicky

Share this post


Link to post
Share on other sites

Hi Dicky,

Is RDP (remote desktop procedure) enabled? If so, that's likely how they got access, and I suggest either to disable it or change the password, so it is not dictionary-attackable and is strong. 

Unfortunately, without more information or the malware file, it will be difficult to figure out whether it is crackable or not. If you can restore from backups, I definitely recommend doing so.

Regards,

Sarah

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.