Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

PClock Ransomware Support and Help Topic


  • Please log in to reply
118 replies to this topic

#31 Dipsgal

Dipsgal

  • Members
  • 19 posts
  • OFFLINE
  •  
  • Local time:08:57 AM

Posted 05 January 2015 - 06:33 PM

Hi

 

Opened it as administrator, but there are no files automatically appearing like they did the first time I opened it. Is there anything else I can try before I start manually dragging the contents of millions of files over? :-)

 

Thanks for the advice. I will start a case.

 

Kind regards

Dipsgal



BC AdBot (Login to Remove)

 


#32 KorabShehu

KorabShehu

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:09:57 AM

Posted 06 January 2015 - 05:18 PM

Hi!
 

I have the same problem with the same cryptolocker copycat, but PClocker cant decryp files.

 

////

Looking for active infection ...
No active infection was found!
 
Scanning 1 folder(s):
  C:\Users\Administrator\Desktop\Exercise_Developing_a_controlled_parking_zone_6.doc
 
Encrypted file: C:\Users\Administrator\Desktop\Exercise_Developing_a_controlled_parking_zone_6.doc
Decrypted file: C:\Users\Administrator\Desktop\Exercise_Developing_a_controlled_parking_zone_6.doc
Backup file: C:\Users\Administrator\Desktop\Exercise_Developing_a_controlled_parking_zone_6.doc.decbak
Status: Unable to create backup of encrypted file! [Code 183]
 
Finished!
////
 
I have 38400 encrypted files, Please help!
 
Kind regards,


#33 haven80

haven80

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:09:57 AM

Posted 07 January 2015 - 11:02 AM

Good Evening to EveryOne.

Im writing from Monterotondo near Rome in Italy.

 

One of our Pc got infected with CryptoLocker/torrentLocker.

 

Fortunally only one pc got infected and no others pc in Lan got the infections.

 

Unfortunally for some of my files i have no backup and got encrypted.

 

I have tried to use your tool but it does not work.

It seems to decypt the files but they does not work.

 

All the files are namefile.xlsx.encrypted

 

They are 4 .xlsx files.

 

Can i provide you one of these files?
Thank you and sorry for my bad english


Edited by haven80, 07 January 2015 - 11:18 AM.


#34 evanb

evanb

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:10:57 AM

Posted 07 January 2015 - 07:40 PM

Hello everyone,

 

I submitted the file objectives2014.doc (encrypted) and the original file for comparison.  Is it possible to take a look and find out if there is any way to decrypt them?

 

Your help is highly appreciated

 

Evan



#35 shroomiin

shroomiin

  • Members
  • 13 posts
  • OFFLINE
  •  
  • Local time:03:57 AM

Posted 08 January 2015 - 02:00 AM

Can anybody please provide the NEW version of WinCL.exe?
It's been removed from the hacked server at this location: hxxp://invisioncorp.com.au/scripts/
I need to re-infect myself but can't seem to find the file after removing it initially.

#36 ehusic

ehusic

  • Members
  • 8 posts
  • OFFLINE
  •  

Posted 12 January 2015 - 05:27 PM

Fabian, can you help me please? I am on variant 4. I have encrypted whole photos from my children in last 10 years. Nothing is more importent to me than that. Is there any hope for decrypting it. Please, help!

#37 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 48,768 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:57 AM

Posted 12 January 2015 - 06:22 PM

See...decrypter FAQs by Fabian Wosar

That has become the primary support topic and it is easier for Fabian to monitor one vs. two topics.


.
.
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Microsoft MVP Reconnect 2016
Windows Insider MVP 2017
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#38 seekhelp

seekhelp

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:08:57 PM

Posted 14 January 2015 - 12:01 AM

Have similar issue got infected on 13th Jan 8 pm Sydney Australia time. Would be gratefull for your help Fabian /all



#39 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 48,768 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:57 AM

Posted 14 January 2015 - 06:22 AM

See...decrypter FAQs by Fabian Wosar

That has become the primary support topic and it is easier for Fabian to monitor one vs. two topics.


Posts any requests for help in that topic.
.
.
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Microsoft MVP Reconnect 2016
Windows Insider MVP 2017
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#40 viper_1990

viper_1990

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:09:57 AM

Posted 18 January 2015 - 11:32 AM

Hello. Please help me. I can't decrypt any files. Some days earlier, when i download Your software and I was try to decrypt my files, i was see that is succesfully decrypted, but files looks the same like before operation. Today I download it once again and it says that I have new version of cryptolocker and i can't decrypt it. My antivirus delete files of this virus so I have only encrypted data.

This is my encrypted file - https://www.dropbox.com/s/p3we0rjnyc88z8m/186507_Amazing-Harbor-1920x1080_1920x1080%20-%20encrypted.jpg?dl=0

and this is originall file - http://freewallpapersbackgrounds.com/server13/photos/wJkOFhKRt3pqZM~/186507_Amazing-Harbor-1920x1080_1920x1080.jpg

 

 

Thanks in advance. I'm loosing my hope now



#41 Jhelp

Jhelp

  • Members
  • 5 posts
  • OFFLINE
  •  
  • Local time:12:57 AM

Posted 27 January 2015 - 10:55 PM

Please help.  I have also uploaded a file that was encrypted by what I believe to be PClock, not sure what version.  Can any one help in decrypting it and my other files that have been encrypted by this trojan?

 

encrypted file name is: 

disney characters 7.JPEG.grnhota

 

Please let me know.  Any help will be greatly appreciated!!



#42 LiquidTension

LiquidTension

  • Malware Response Instructor
  • 1,198 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:57 AM

Posted 28 January 2015 - 03:25 AM

Hi Jhelp,

You've been infected by CTB Locker. However, it's possible there are other file encrypting infections present as well. Double, and sometimes triple encryption makes things far more complicated.

See here for information on CTB Locker. 
http://www.bleepingcomputer.com/virus-removal/ctb-locker-ransomware-information

 

See here for information on KEYHolder: 

http://www.bleepingcomputer.com/forums/t/559469/new-keyholder-ransomware-brought-to-you-by-the-same-developers-of-cryptorbit/


Edited by LiquidTension, 29 January 2015 - 12:08 AM.

Posted Image

#43 suziebee

suziebee

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:04:57 AM

Posted 03 April 2015 - 10:32 PM

i believe we have been hit by copy of crypto locker. We tried 'decrypt_pclock2' but it siad it could not find key. What are my options?



#44 Datukanan

Datukanan

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:04:57 PM

Posted 22 April 2015 - 12:21 PM

I have submitted a sample of my encrypted file.  please help. thanks.



#45 fern321

fern321

  • Members
  • 4 posts
  • OFFLINE
  •  
  • Local time:09:57 AM

Posted 22 October 2015 - 03:16 AM

It is look like a have the same cryptolocker virus.
 
I did upload a file sample to the website listed here.
 
will your decryptor work for me? Can you help me, please ! 





1 user(s) are reading this topic

1 members, 0 guests, 0 anonymous users


    MickyMouse