Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

How can I tell which version of CRYPTO -- I have a "HOWTODECRYPT.HTML" files


  • Please log in to reply
1 reply to this topic

#1 MotherT

MotherT

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:06:19 PM

Posted 12 July 2014 - 10:45 PM

I have read through many different threads and I have tried Anti-CryptoBitV2 to decrypt my files but I'm still not sure I know what verision of Crypto __  I am working with.

 

I got really excited when I read this article:

http://malwaretips.com/threads/ransomware-with-a-happy-ending.28567/

That people infected with a version of ransomware that leaves the "HOWTODECRYPT.HTML" may have a botched encryption, but I can't find out how to determine if I have that version, and if I do, how to get my files back.

 

This is the contents of the HTML:

 

Your files were encrypted and locked with a RSA2048 key

To decrypt your files:
Download the Tor browser here and go to http://zpwibfsmoowehdsm.onion within the browser.
Follow the instructions and you will receive the decrypter within 12 hours.
You have ten days to obtain the decrypter before the private key is deleted from our server - leaving your files irrevocably broken.
Your ID is 82049184

Guaranteed recovery is provided before scheduled deletion on the day of 07/21/2014 17:24:00

------------------------------

My backup is a week old and I'm hoping to be able to recover these files.

 

Can anyone tell me which version I actually have or how I could determine it?

 

Thanks!



BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 52,087 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:05:19 PM

Posted 14 July 2014 - 07:49 PM

A repository of all current knowledge regarding Cryptolocker is provided by Grinler (aka Lawrence Abrams), in this tutorial: CryptoLocker Ransomware Information Guide and FAQ

A repository of all current knowledge regarding CryptorBit and HowDecrypt is provided by Grinler (aka Lawrence Abrams), in this tutorial: CryptorBit and HowDecrypt Information Guide and FAQ
CryptorBit (HowDecrypt) will create a HowDecrypt.txt file and a HowDecrypt.gif in every folder that a file was encrypted. The GIF and TXT files will contain instructions on how to access a payment site that can be used to send in the ransom.

A repository of all current knowledge regarding CryptoDefense is provided by Grinler (aka Lawrence Abrams), in this tutorial: CryptoDefense and How_Decrypt Ransomware Information Guide and FAQ
CryptoDefense will create a How_Decrypt.txt and How_Decrypt.html file in every folder that a file was encrypted. The HTML and TXT files will contain instructions on how to access a payment site that can be used to send in the ransom.

A repository of all current knowledge regarding CryptoWall is provided by Grinler (aka Lawrence Abrams), in this tutorial: CryptoWall and DECRYPT_INSTRUCTION Ransomware Information Guide and FAQ
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users