stormbul 0 Posted September 15, 2017 Report Share Posted September 15, 2017 My SQL Server got infected with ransomware. All files are encrypted with the following extension [[email protected]].nuclear Any help? Quote Link to post Share on other sites
GT500 860 Posted September 20, 2017 Report Share Posted September 20, 2017 Without more information, it sounds like it might be a variant of BTCWare. I recommend checking with ID Ransomware at the following link to verify that:https://id-ransomware.malwarehunterteam.com/ You can copy and paste the link to the results into a reply for me to review as well. Quote Link to post Share on other sites
mgiammarco 0 Posted October 3, 2017 Report Share Posted October 3, 2017 A customer of mine got the [email protected] variant. I am trying btcware decrypter without luck. What can I do? Thanks, Mario Quote Link to post Share on other sites
GT500 860 Posted October 4, 2017 Report Share Posted October 4, 2017 There is currently no publicly available decryption tool for this variant of BTCWare. The only way to decrypt files that have been encrypted by it is to obtain the private key from the criminals who made the ransomware. Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.