Amnesia Ransomware attack today.. pls help

[rajipillai 0]

It attacked the main folder of web site and encrypted all the images and .cs files. Also it encrypted the sql server database files and I cant login to sql server. They are asking 1 bitcoin and i said cannot pay. 

I tried to decrypt the key with decrypt_amenesia.exe but it said it couldnt. I bought the emisoft antimalware and deleted the malware 

Anyway i can encrypt it? They renamed the files to a new name with amnesia file extension. Even though i have all original files I cant match all since they renamed all.

Thanks in advance

4M000000002vqCiUEssrfqgxVlwZTCnWwPNIsRmkcHmNGogjjeXT50.amnesia

Default.aspx.cs

HOW TO RECOVER ENCRYPTED FILES.TXT

[ITwebs 0]

have you tried any of the tools yet?

https://decrypter.emsisoft.com/download/amnesia

You need to use an original file and it's encrypted

 

[rajipillai 0]

I tried, it says it cant decrypt..

[Sarah W 26]

Hi rajipillai,

We released a new decrypter for the updated version here.

Regards,

Sarah

[gpnikola 0]

that's great it work for me.

 

i also have files encrypted but without changing the file name

can you help me with them i suppose is the same virus attack(same day time)

[ITwebs 0]

I have the same, but this was amnesia2 which said it decrypted the files but did not work

[rajipillai 0]

Thank you Sarah, it decrypted an image file. It takes quite a while for each file though. But it is useful to decrypt important files. Good job.. thanks again.

[Fabian Wosar 388]

Glad it was helpful

[Ponya777 0]

Hello everybody. Is there any information about the extension .wallets. I add a note with a vikup. Please, any help will be appreciable. thank you in advance

Uploaded files that Amnessia2 can not decrypt, please help

https://fex.net/950318436960

File name: Recover files .wallets

 

Yotabyte

====================================================================================================

 

YOUR FILES ARE ENCRYPTED!

 

Your personal identifier

0236175288070114448098024366574551205534290086430907408754618887712618041644900364570319054003387674

7133002947392016049117568109421809760194383022655043139477348876815098335007651695710700836836599881

7082467791123760352244794838765366409143535605955271092700610079773256785834567131823589074393219341

0259882041579418102449139318163504765018971962092917461750118075269859073101508340077216269730143545

8635578121533653212006925999453801813908448868663185209674894580193104189224687110507810598085534025

1004886237210647439135705818450510521669862339012254052439617051486835764183437961498282332238011005

710924456570586175

 

Your documents, photos, databases, save games and other important data were encrypted.

Data recovery requires a decryptor.

To get the decryptor. You need to write to [email protected] for find out the cost of decrypting files

 

If you do not have bitcoins

 * Create a wallet Bitcoin: https://blockchain.info/en/wallet/#/signup

 * Get Crypto Currency Bitcoin:

   https://blockchain.info/wallet/#/buy-sell

   https://localbitcoins.com/buy_bitcoins (Visa/MasterCard, Paypal Visa Wallet and other.)

   http://www.coindesk.com/information/how-can-i-buy-bitcoins/ (Instruction for beginners)

 

After payment, send an email to [email protected] .

In the letter, enter your personal identifier.

 

In the reply letter you will receive a program for decryption.

After starting the decryption program, all your files will be restored.

 

Attention!

  * Do not attempt to uninstall the program or run antivirus software

  * Attempts to decrypt files by themselves will result in the loss of your data

  * Decoders of other users are incompatible with your data, as each user

Unique encryption key

 

====================================================================================================