sorry about my bad english,
I have a notebook infected by last teslacrypt ransomeware, everything is crypted. I have found these text files in documents folder:
recover_file_caeesnllr.txt file date 04/02/2016 22:52
recover_file_bslpwywii.txt file date 05/02/2016 08:01
recover_file_jiyddfjgw.txt file date 05/02/2016 14:13
recover_file_ewmbncfjm.txt file date 06/02/2016 10:25
recover_file_hejujrpni.txt file date 06/02/2016 16:13
all containing this:
DED9DDE8D6BF9E is the id assigned for the recovery of crypted files after the ransom payment.
Have you any idea about this ? Maybe they contain the private key ?
Thanks in advantage