Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

ransomware decrypts@airmail.cc please help me file .cc


  • This topic is locked This topic is locked
1 reply to this topic

#1 ecamic

ecamic

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:09:11 PM

Posted 31 March 2018 - 05:17 AM

hi there,

my file are crypt with an extension .cc but i stop the infection before my screen change.

i have a file text name : HOW TO RECOVER ENCRYPTED FILES - decrypts@airmail.cc.TXT

inside :

====================================================================================================

decrypts@airmail.cc
====================================================================================================
Your files are encrypted!
Your personal identifier:
6A020000000000002D015D3125928B0DC430084357C28009ECBFD8BDEAA4566A21187F1255A1EAD8F7BA26D27BF1F6B27D11
542F76CE252D7DDF24A7E497778A3CA7D2EEBBADE0DBF9A6E8B5BA19CCE8B91E17DDF315B855197E2E266BFD6D558CB29CC3
DC5AEF9D1BC82DD037ACDAE3B7795E4ADF41BDF03A03A4A98D8D7CDD13A15DD573BF975573AAD3FDC565DD631532814196FA
754635AB26D7E3B492B1BE825664A14D2374B633DFC6ED0E3B810597DA7E78C3DC5E6781D13BCBBCAD4E61697E1D3F1DCFDD
3B16B0BD2C7010D2B351B0764C48AFE2C10A9FC07E701B88E27C339C7023944F920B6CA2D88F5405EB913A71415A60817CD8
AF42097C8531FAE4350E6357F3C2C484632A7D7BD3839F578232818CFA137F18AC6139897B13C15FF160F939B2490CCB4549
3D1328E826078003E06902C445F22EEE0D1746118DAC9CFC01
====================================================================================================
To decrypt files, please contact us by email:
decrypts@airmail.cc
====================================================================================================
 
if you need,  i have a version of the same file crypt and original.
 
thank's

 



BC AdBot (Login to Remove)

 


#2 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,907 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:02:11 PM

Posted 31 March 2018 - 08:08 AM

Files encrypted with decrypts@airmail.cc are related to a new variant of Scarab (Scarab-Decrypts) Ransomware...see here.

Unfortunately, there is no known method to decrypt files encrypted by Scarab with out paying the ransom. If possible, your best option is to restore from backups, try file recovery software or backup/save your encrypted data as is and wait for a possible solution at a later time.

There is an ongoing discussion in this topic where victims can post comments, ask questions and seek further assistance. Other victims have been directed there to share information, experiences and suggestions.Rather than have everyone with individual topics, it would be best (and more manageable for staff) if you posted any more questions, comments or requests for assistance in the above support topic discussion...it includes experiences by experts, a variety of IT consultants, end users and company reps who have been affected by ransomware infections. To avoid unnecessary confusion, this topic is closed.

Thanks
The BC Staff
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users