Thankfully, Fabian Wosar of Emsisoft has been able to devise a way to decrypt files encrypted by this family:
I just released a generic decrypter for this type of infection. You can download it here:
You will need an encrypted file as well as its unencrypted version. Just select both the encrypted and original version and drag and drop it onto the decrypter executable. The key finding process may take a while, so please be patient. If you run into any issues, please feel free to post.
As a general rule I don't accept any donations for my work. If you feel thankful and want to throw some money at something, I suggest investing into a proper backup solution. Personally I am using CrashPlan. However, there are a lot of different solutions out there. Pick one that you feel comfortable with. If you are unsure, I am sure the helpful users in this amazing community will love to help you out picking one that fits your needs and requirements. If you want to spend even more money, I am sure the polar bears would appreciate your help. I know one polar bear in particular that would be very thankful.
I was infected with virus That encrypt my files with .txt.73i87A extension (EXAMPLE.txt.73i87A). When i was looking for help online i followed an advise to remove the virus with Malware-bytes,Hitman Pro and Roguekiller Anti-malware software's..I have done the scan on my computer and they found some infected virus which was removed and deleted by the anti-malware software i mentioned.
I GOT THE BELOW MESSAGE ANYTIME I RESTART MY COMPUTER EVEN AFTER I HAVE SCANNED MY COMPUTER WITH THE MENTIONED ANTI-MALWARE SOFTWARE'S.
Hello. Your files are encrypted! To decrypt files you need to write an email to: firstname.lastname@example.org or email@example.com
In the letter you need to tell us your country of residence.
Services decoding paid. Please do not write if you do not intend to pay.
On checking, you can send us a 2-3 small encrypted file (up to 3 megabytes each) and we decipher them for free.
Your ID y4587529
After the removal of the virus my files are still in .txt.73i87A extension....Please help me and advice me on how i will decrypt or restore my file back and remove the .txt.73i87A extension.
My files are really important i do not want to loose them please..Help
Thanks in advance..
Edited by xXToffeeXx, 19 May 2016 - 02:50 PM.