Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

POLICE Virus


  • Please log in to reply
3 replies to this topic

#1 daldry

daldry

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:10:55 PM

Posted 15 November 2012 - 06:44 AM

Hello,
i was infected by this virus, it did encrypt all my files and photos and changed their extension to .POLICE, i restaured my system but i want to recover my files,and in each folder i found a text file where inside it was written that the FBI who did this encryption and i need to pay.
i have the encrypted files and some of the same healthy files.

So am waiting for solution.

[Moderator edit and note: thread moved to more appropriate forum. jgw]

Edited by jgweed, 16 November 2012 - 06:09 AM.


BC AdBot (Login to Remove)

 


#2 thisisu

thisisu

  • Malware Response Team
  • 2,525 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:03:55 PM

Posted 16 November 2012 - 04:31 AM

Hello :)

Try this:

Download: te94decrypt.exe by DrWeb

Place it in the root of your C: drive. So... it should be at C:\te94decrypt.exe

  • Press and hold the Windows key Posted Image and then press the letter R on your keyboard.
  • This opens the Run dialog box.
  • Copy and paste the below text inside the text-field:
    • C:\te94decrypt.exe -k 186
  • Now press ENTER
  • The tool should open and start scanning your system to repair the .POLICE files to their original decrypted state.

Note: Some users report that C:\te94decrypt.exe -k 85 worked for them. So try that one incase the first command was not successful.

#3 daldry

daldry
  • Topic Starter

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:10:55 PM

Posted 16 November 2012 - 07:44 AM

Hello,
i'm runing the spfteware right now, and apparently it work!!!

Thank you very much!!

#4 thisisu

thisisu

  • Malware Response Team
  • 2,525 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:USA
  • Local time:03:55 PM

Posted 16 November 2012 - 11:48 AM

Great :thumbup2:
Credits to DrWeb :)




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users