I've got these .jpg files which are encrypted with the helpme_freespeech ransomware.
I ran Rakhni Decryptor and after pointing it to the right directory (I have the files stored in C:\Temp\193328) it said it found the password correctly.
It then began decrypting and after saying that it found 19 infected files and decrypted them, I stopped the process.
I went to C:\Temp\193328 and found both the encrypted .jpg files and the normal .jpg files.
However, the decrypted files do not work. After looking them at Hex, they indeed look still encrypted.
I have tried it with 3 different .jpg files and the result is the same.
I've posted here http://www.bleepingcomputer.com/news/security/new-helpme-freespeechmail-org-ransomware-can-be-decrypted-for-free/#cid2552 and a kind gentleman pointed me to this forum.
Please find one encrypted and one decrypted file, and the log files from Rakhni here
Any help would be appreciated.
Edited by dimxx24, 21 May 2016 - 05:55 AM.