Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

I Found The Way To Decrypt All Ransome encrypted Files


  • Please log in to reply
8 replies to this topic

#1 azharssm

azharssm

  • Members
  • 8 posts
  • OFFLINE
  •  

Posted 19 March 2014 - 01:28 PM

Yesterday , I had this problem , ransomware cryptlocker infected computer and locked all files, Today i downloaded a free software, and decrypted all files, with working!!!!!,      Iam Happy Now!!!!!!!!!!!!,  LOL



BC AdBot (Login to Remove)

 


m

#2 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:44 PM

Posted 19 March 2014 - 03:08 PM

Hello azharssm -

 

We would all be very interested in your solution if you would care to leave the steps here.

 

As you did not mention the "free software" program, can you please list it here.

 

BleepingComputer hosts the solutions for almost all infections, but we do not list this yet.

 

We host solutions for many Ransomeware type infections, but cryptlocker would be great to add to the list.



#3 azharssm

azharssm
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  

Posted 21 March 2014 - 06:23 AM

wait



#4 azharssm

azharssm
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  

Posted 21 March 2014 - 07:06 AM

Finally got the solution for decrypt ransomeware encrypted files..!! (SORRY FOR MY ENGLISH)
There Are Two Softwares for it :   1:  Kaspersky Xorist decrypter ( it is did for me, it decrypted all .LOCKED files like  (doc,docx,jpeg,and video files and other all, )  download it from any website it is free, search in google and download, it is only 601 KB!!!!!!!  and open it and scan it will scan whole computer it takes about 45 minutes for me, and it will create  a new version of our file,  but .LOCKED files will not deleted ,  we need to delete all .LOCKED files from our computer, type .LOCKED in search bar. and delete it.
second software is 2: kaspersky rectordecryptor ( it did not work for me , i think it is for another type of ransomeware )
Sure it will decrypt all encrypted files!!!!!!!!!!!
 



#5 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,582 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:44 AM

Posted 21 March 2014 - 09:06 AM

There are various types of ransomware and different tools available to deal with specific infections only.

Kaspersky Virus-fighting utilities includes several fix tools for some types of ransomware such as:
  • XoristDecryptor is designed to deal with Trojan-Ransom.Win32.Xorist, Trojan-Ransom.MSIL.Vandev - XoristDecryptor ransomware which encrypts files with numerous extensions.
  • RectorDecryptor is designed to deal with Trojan-Ransom.Win32.Rector ransomware which encrypts files with extensions .jpg, .doc, .pdf, .rar.

.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#6 centralmick

centralmick

  • Members
  • 6 posts
  • OFFLINE
  •  
  • Local time:08:44 PM

Posted 22 March 2014 - 02:03 AM

I have tried kaspersky xorist decrypter. Its doesnt appear to have worked. I did run a program eraremover in safe mode which appear to clean up several files that had registry changes. It took many times by pressing the f8 key to get into safe mode. But it still appears all the files are encrypt ed still with the virus........should i just pay the ransom money to regain all my business files. I have no backups..... to late now...what way a to learn all about this .

#7 noknojon

noknojon

  • Banned
  • 10,871 posts
  • OFFLINE
  •  
  • Gender:Not Telling
  • Local time:07:44 PM

Posted 22 March 2014 - 03:25 AM

Hello -

We are very sorry for you if your system has been locked by CryptoLocker.

 

Currently there is no way to fully remove this problem, and it is a World Wide threat unless these people are caught.

 

Bleeping Computer has joined with several Antivirus / Antimalware companies to try and force unlock computers.

 

Unfortunately only a Pro Version of Malwarebytes Anti-Malware, and a few other active programs could stop it entering.

 

Please join in this current discussion area, where all are welcome to read or comment => Our discussion thread

 

For the latest information on the CryptoLocker, please see this guide / FAQ: CryptoLocker Ransomware Information and FAQ

 

Any other people who have this problem, please read the FAQ, and only post to the linked area above. Not Here.



#8 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 50,582 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:44 AM

Posted 22 March 2014 - 02:27 PM

......should i just pay the ransom money to regain all my business files. I have no backups..... to late now...what way a to learn all about this .

It depends on what type of ransomware has infected your system.

As I already said, XoristDecryptor is specifically designed to deal with Trojan-Ransom.Win32.Xorist, Trojan-Ransom.MSIL.Vandev - XoristDecryptor...it doesn't work with other types of ransomware.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#9 sakmsb123

sakmsb123

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:03:14 PM

Posted 18 June 2014 - 02:52 AM

XoristDecryptor -- this works for the error message:-- it decrypts and creates new files of all the locked files....

 

Your files are locked and encrypted with a
unique RSA-1024 key!
To regain access you have to obtain the
private key (password).
++++++++++++++++++++
To receive your private key (password):
Go to http://u5ubeuzamg54x5f3.onion.to
and follow the instructions.
You will receive your private key (password)
within 24 hours.
Your ID# is 28403489
If you can't find the page, install the Tor
browser (https://www.torproject.org/
projects/torbrowser.html.en ) and browse to
http://u5ubeuzamg54x5f3.onion
++++++++++++++++++++
BEWARE - this is NOT a virus.
The ONLY way to unlock your files/data is
to obtain your private key (password) or
you may consider all your data lost.
You have just 5 days before the private key
(password) is deleted from our server,
leaving your data irrevocably broken.
++++++++++++++++++++
LOCKED ON POSSESSION OF COPYRIGHTED
MATERIAL AND SUSPICION OF
(CHILD)PORNOGRAPHIC MATERIAL.






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users