Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

infectet with helpers@cock.li


  • Please log in to reply
1 reply to this topic

#1 meliwheel

meliwheel

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:01:21 PM

Posted 13 March 2018 - 02:30 PM

infected with ransomware 

like this

 

=================================================================================================
helpers@cock.li
====================================================================================================
Your files are encrypted!
Your personal identifier:
6A02000000000000DECC0C201592091280200C03BFD4F4EEFF3FC6323A8A50D264D1E41797A94A2FDB081FBB0A99F66E42B5
0CB6D3E55BC18AC7C6C8D6EB2F7B335432E05658C7794FCE2DE5A9ABAE56F486A63A2F7DCD146202CD3B8DA54913E8DDD2E4
D6827E7E363E4BEFAFE9919B13911568B36BCD79525251DEBD9B8A715B2B3F79251AB9B63DDBAE9E297D63B52634911F69BD
CBB089A5F16F73F2DB18A2B4B592AB8DA926E0357E3AAA1652BAAB1C653926C8BC5933930E8FFEC82C695485B3C56B602C1B
6AE96D1E648F008870CF6B600B801D6A95F94143A6699239DE3187D800A57F8E7561E16F50317DB8ED947BB0560E17176169
69417D4F6F7E58F581F4996F9E1581384C4C718CD401029AFB11140933CE2EAA97066ADF2E78991DDFD0E0F4FF1136B6552A
BBC12449D861134B75487950DDEB7323A2F1AB0CA066F400
====================================================================================================
To decrypt files, please contact us by email:
helpers@cock.li
=============================================================================


BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,287 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:08:21 AM

Posted 13 March 2018 - 05:10 PM

Are there any obvious file extensions appended to or with your encrypted data files? If so, what is the extension and is it the same for each encrypted file or is it different? Some types of ransomware will completely rename, encrypt or even scramble file names while others do not append any extensions.

The best way to identify the different ransomwares is the ransom note (including it's name), samples of the encrypted files, any obvious extensions appended to the encrypted files, information related to any email addresses or hyperlinks provided by the cyber-criminals to request payment and the malware file responsible for the infection.

Did you submit (upload) any samples of encrypted files, ransom notes and any contact email addresses or hyperlinks provided by the cyber-criminals to ID Ransomware for assistance with identification and confirmation? Uploading both encrypted files and ransom notes together provides a more positive match and helps to avoid false detections.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users