stormbul Posted September 15, 2017 Report Share Posted September 15, 2017 My SQL Server got infected with ransomware. All files are encrypted with the following extension [[email protected]].nuclear Any help? Link to comment Share on other sites More sharing options...
GT500 Posted September 20, 2017 Report Share Posted September 20, 2017 Without more information, it sounds like it might be a variant of BTCWare. I recommend checking with ID Ransomware at the following link to verify that:https://id-ransomware.malwarehunterteam.com/ You can copy and paste the link to the results into a reply for me to review as well. Link to comment Share on other sites More sharing options...
mgiammarco Posted October 3, 2017 Report Share Posted October 3, 2017 A customer of mine got the [email protected] variant. I am trying btcware decrypter without luck. What can I do? Thanks, Mario Link to comment Share on other sites More sharing options...
GT500 Posted October 4, 2017 Report Share Posted October 4, 2017 There is currently no publicly available decryption tool for this variant of BTCWare. The only way to decrypt files that have been encrypted by it is to obtain the private key from the criminals who made the ransomware. Link to comment Share on other sites More sharing options...
Recommended Posts