Theamoebson 0 Posted April 6, 2017 Report Share Posted April 6, 2017 Hi. Firstly thanks for creating this forum... A ray of hope. OK so I have a Btcware infection with all files changed to '. Btcware' does anyone know if a decrypter will become available for this? I am tempted to pay up and hope for the key but I would absolutely hate to do that. I have searched this forum and this seems to be a new one I think... Quote Link to post Share on other sites
Sarah W 26 Posted April 9, 2017 Report Share Posted April 9, 2017 Hi Theamoebson, BTCWare is unfortunately not decryptable. You can either backup your files and wait for a solution, or pay the criminals (we do not recommend this) currently. RDP is how these criminals usually enter, so please secure it with a strong password. Regards, Sarah Quote Link to post Share on other sites
Theamoebson 0 Posted April 9, 2017 Author Report Share Posted April 9, 2017 Thanks for your reply Sarah. Do you mean that it will never by decrypterable or just currently? Quote Link to post Share on other sites
Sarah W 26 Posted April 10, 2017 Report Share Posted April 10, 2017 Hi Theamoebson, Well, the keys may be recovered or leaked later on, but you may be waiting a long time. The encryption is secure though, unfortunately. Regards, Sarah Quote Link to post Share on other sites
Demonslay335 26 Posted May 20, 2017 Report Share Posted May 20, 2017 @Theamoebson Do you still have some encrypted files, and their originals that we can take a look at? We might be able to help with this ransomware now. We do need a sample of the malware if you can find it. Quote Link to post Share on other sites
Theamoebson 0 Posted June 21, 2017 Author Report Share Posted June 21, 2017 Hi Sorry for the very late reply - I had rather given up on this...There seems to be a few decypters now available but on certain .DOCX files the restored versions are corrupted. Any ideas? Quote Link to post Share on other sites
Demonslay335 26 Posted June 21, 2017 Report Share Posted June 21, 2017 No-one has released a decrypter for the original ".btcware" extension without an email address, but we're still working on it. I still need the files from you that I requested. Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.