Jump to content

my files encrypt by mogranos


Recommended Posts

.mogranos is an older variant, so you should be able to use our decrypter to recover your files. If you have an online ID (which is most likely) then you'll need to submit file pairs via our online form. All of the information you need should be in the topic that Amigo-A linked to.

Link to comment
Share on other sites

Dear Emsisoft Support...

I was scan using emisoft decryptor and the result is : Error: Unable to decrypt file with ID: sdGE91Zchj52ppwrVXGdCBWNqqTYZQhRlbJfmoxo

my personal ID : 133nKfRedsLsdGE91Zchj52ppwrVXGdCBWNqqTYZQhRlbJfmoxo

what should i do next sir, thanks

 

Edited by kojai3g
add other text
Link to comment
Share on other sites

I gave you a link to the forum. There are all the explanations and there is a link to another article on another forum
https://www.bleepingcomputer.com/news/security/stop-ransomware-decryptor-released-for-148-variants/

It says here that for this .mogranos variants you should try to set the Emsisoft Decryptor to decrypt your files.

To do this, find the original file (for example, a photo in JPG or PNG format) and take its encrypted copy.
They need to be loaded into the Decryptor and it will calculate the key for files of this type.
If you take PNG photos, all other PNG photos and images will be decrypted.
If you take JPG photos, all other JPG photos and images will be decrypted.

Also need to do for all other file types. A simple scan will not decrypt the files. So it was before, when the developer tuned the Decryptor for each case. Now are a lot of victims, these are people from all over the planet, where they use PC and the Internet.

Then there was no Decryptor setting. Now it is possible. Just need to work with your hands.

Link to comment
Share on other sites

Where can I find the original files if everything is encrypted?

Here is a sample list where you can find the originals of the encrypted files (my article):

1) on flash drives, external drives, CD / DVD, memory cards of the camera, phone;
2) in attachments of emails sent or received by you;
3) among the copies of shared photos of friends, relatives (in their PC) that you gave;
4) among the uploaded photos in the social. networks, including via smartphone and tablet;
5) among the uploaded photos to cloud services (Google Disk,  OneDrive, Yandex Disk etc.);
6) on the sites of ads, where you could previously send photos or images;
7) among unencrypted files, copies, renamed files on your PC;
8 ) on an old PC or disk, from where you transferred photos and documents to a new PC;
9) you can re-upload from the Internet previously downloaded photos, pictures, etc .;
10) you can use sample images supplied with Windows;
11) take photos or pictures that you previously posted on the avatar on the forums.
12) extract previously deleted files from the Recycle Bin or restore it with a special program.
 
If decryption failed ...
 
It is possible that the original file was an inaccurate copy of the encrypted. This could be due to the fact that earlier you yourself reduced or corrected it in the editor, or uploaded to social networks, cloud services, and there the file was somehow automatically changed.
Look for more files and try different pairs of encrypted and original files with the same name. Very often files can have the same name, but are not a copy of each other. Vocabulary used in any language is limited. The possibilities of PCs, cameras and other devices for taking photos are also limited. In cameras and mobile devices, names for photos are given automatically according to a specific format, so photos with the name from IMG_0001.JPG to IMG_9999.JPG can be quite a lot in different years. Smartphones can give photos more original names, such as IMG_20171012_170451.jpg - here and the date of shooting, and the sequence number, because the repetition of the name is unlikely.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...