krzysiek92 0 Report post Posted November 2, 2018 Hello I have a problem with an encrypted computer that was used as a server. The computer was encrypted 2 years ago and has not been used since then. I am looking for an appropriate encrypt-er, please help. Attachments contain samples of encrypted files. samples.zip scan_181031-125913.txt FRST.txt Addition.txt Quote Share this post Link to post Share on other sites
GT500 572 Report post Posted November 2, 2018 There are two possibilities according to ID Ransomware:https://id-ransomware.malwarehunterteam.com/identify.php?case=584757df3258e3064e2c3b817b12d47dbfa825b7 It could be ApocalypseVM, which is decryptable. Based on the extension .not_available it's more likely that it's a variant of Al-Namrood. ID Ransomware says Al-Namrood 2.0, which is not decryptable. The age of the infection suggests it may be the original Al-Namrood, which we do have a decrypter for. Quote Share this post Link to post Share on other sites
krzysiek92 0 Report post Posted November 5, 2018 I tried both decrypters with failure maybe I'm doing something wrong or it really is Al-Namrood 2.0 😞 Quote Share this post Link to post Share on other sites
GT500 572 Report post Posted November 5, 2018 In that case it's more than likely Al-Namrood 2.0. Quote Share this post Link to post Share on other sites
