gianni 0 Posted December 11, 2019 Report Share Posted December 11, 2019 I HAVE A PROBLEM TO DECRYPT MY FILE WITH FT CODE I ATTACH FILE INFECTED END INITIAL MESSAGE AND BELOW THE REQUEST COULD YOU HELP ME? FT. BARRY BARAK - GUINEE.xls.f5117c READ_ME_NOW.htm Quote Link to post Share on other sites
GT500 854 Posted December 12, 2019 Report Share Posted December 12, 2019 This is a PowerShell-based ransomware. In October they started distributing it in malicious Word documents via spam e-mails. There's more information at the following link:https://www.bleepingcomputer.com/news/security/ftcode-powershell-ransomware-resurfaces-in-spam-campaign/ Unfortunately I don't know of any way to decrypt files for free. The encryption method they use appears to be secure. I'll ask if there are any possibilities, however I don't expect any. Quote Link to post Share on other sites
Amigo-A 136 Posted December 12, 2019 Report Share Posted December 12, 2019 more precisely FTCode Ransomware or PowerShell Locker 2019 Quote Link to post Share on other sites
GT500 854 Posted December 13, 2019 Report Share Posted December 13, 2019 @gianni if you have the malicious file that caused the infection, would it be possible to upload it to VirusTotal and post a link to the analysis here? Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.