Bravo737 0 Posted April 6, 2018 Report Share Posted April 6, 2018 First of all, excuse my English. On May 23, 2017 at 12:27 AM, I entered a "virus" on my PC that encrypted a large part of my files with a .locked extension. I have been dealing with the RANSONWAMRE ID to identify what virus it is, and so proceed to recover my files, without success :(. In one of the forums that he consulted, they told me that it might be the Stampado virus, and today reading more information, I stumble upon you, so I go with my query so they can guide and help me. Already, a big greeting from Argentina Thank you very much Quote Link to post Share on other sites
GT500 854 Posted April 7, 2018 Report Share Posted April 7, 2018 I recommend uploading a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with:https://id-ransomware.malwarehunterteam.com/ You can paste a link to the results into a reply if you would like for me to review them. Quote Link to post Share on other sites
Bravo737 0 Posted April 28, 2018 Author Report Share Posted April 28, 2018 This ransomware is still under analysis. Please refer to the appropriate topic for more information. Samples of encrypted files and suspicious files may be needed for continued investigation. Identified by sample_extension: .locked.<ext> Click here for more information about CryptoWire Quote Link to post Share on other sites
GT500 854 Posted April 29, 2018 Report Share Posted April 29, 2018 It sounds similar to this newer variant of CryptoWire, however the file extension is different:https://bartblaze.blogspot.com/2018/04/cryptowire-ransomware-not-dead.html You can try pasting the following into the DecryptionKey box in the ransomware, and then click the Decrypt Files button to see if that works: VgjRPoOM0oa92_jId!/wkMeW6,guuSe If it doesn't, then we'll need a copy of the ransomware to take a look at, as it could be another new variant. We can try getting a log from FRST, and see if it shows the ransomware on your computer. You can find instructions for downloading and running FRST at the following link:https://helpdesk.emsisoft.com/en-us/article/274-running-a-scan-with-frst Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.