Jump to content

My Laptop is infected with Ransomeware (.bora extenstion)


Recommended Posts

Hello, Few Months back i was infected with ransomeware virus. All my important files got infected with .bora extension.

I also got this text file. Can someone help me out?

""

ATTENTION!

Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-s4NpK2lgQA
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.


To get this software you need write on our e-mail:
[email protected]

Reserve e-mail address to contact us:
[email protected]

Your personal ID:
0171mHffOIK6x9LCHzY3mTEOrGNxEHx8jY6L0MkyvDv4ojAKf

""

Link to comment
Share on other sites

On 5/18/2020 at 5:00 AM, Anis Shah said:

Your personal ID:
0171mHffOIK6x9LCHzY3mTEOrGNxEHx8jY6L0MkyvDv4ojAKf

This is a newer variant of STOP/Djvu, and your ID is an online ID, so there is currently no way to decrypt your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Link to comment
Share on other sites

20 hours ago, Anis Shah said:

Sir were there be any chance in future to retore my files?

If law enforcement is able to catch the criminals or otherwise gain access to their servers and release their private keys for use in decrypters, then we can add them to our database so that everyone can get their files back.

Our recommendation is to save a backup of your encrypted files and keep it in a safe place in case decryption is possible at some point in the future.

We also recommend keeping an eye on BleepingComputer's newsfeed, as they will usually report on new developments with ransomware decrypters:
https://www.bleepingcomputer.com/

If you have an RSS feed reader, then they also have an RSS feed so that you don't have to manually check for news:
https://www.bleepingcomputer.com/feed/

Link to comment
Share on other sites

  • 4 weeks later...
  • 1 month later...
18 hours ago, Anis Shah said:

Any update sir?

No.

We also recommend keeping an eye on BleepingComputer's newsfeed, as they will usually report on new developments with ransomware decrypters:
https://www.bleepingcomputer.com/

If you have an RSS feed reader, then they also have an RSS feed so that you don't have to manually check for news:
https://www.bleepingcomputer.com/feed/

Link to comment
Share on other sites

  • 1 month later...

Hello sir, how are you? Hope you are doing well.

Any update regarding my issue sir? I was searching for solution on the website which you have shared with me, but i havent found any solution regarding .bora virus. Can you please update me regarding this thing?

Link to comment
Share on other sites

On 10/4/2020 at 3:35 AM, Anis Shah said:

Any update regarding my issue sir? I was searching for solution on the website which you have shared with me, but i havent found any solution regarding .bora virus. Can you please update me regarding this thing?

No, there are no updates. Online ID's for newer variants of STOP/Djvu use RSA keys, which are impervious to most attacks. Without obtaining the private keys from the criminals, there is no way to decrypt files with online ID's.

Link to comment
Share on other sites

  • 7 months later...
4 hours ago, Anis Shah said:

I hope now we have an update regarding .bora virus

I recommend keeping an eye on BleepingComputer's newsfeed, as they will usually report on new developments with ransomware decrypters:
https://www.bleepingcomputer.com/

If you have an RSS feed reader, then they also have an RSS feed so that you don't have to manually check for news:
https://www.bleepingcomputer.com/feed/

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...