Waiting (CryTox) Ransomware ([random 9 char].waiting, .wait) Support Topic

<filename>.bmp XOTQZLWL5.waiting
<filename>.jpg QQYKLMTP5.waiting
<filename>.jpg NVLTNZOO3.waiting
<filename>.png vqottlor1.wait
<filename>.png raoifjgna.wait

Sorry to bother you guys! currently I am having a virus that encrypts all data with the extension *.waiting. I have archived some old files elsewhere. Don't know I have two identical files (one infected file and the other uninfected) I don't know Do you need it? and help me get back new data I haven't had time to back up recently. Please give me the link so I can upload those 2 files if you need. Thank you very much!

Edited by quietman7, 11 July 2021 - 05:22 PM.

Archive files into a zip archive and only then attach to the message. 

Edited by Amigo-A, 09 July 2021 - 06:38 AM.

I have zipped and uploaded the file is infected with a virus. The system gives an error "Error You aren't permitted to upload this kind of file". can't upload so you ah.

through the site

https://dropmefiles.com/

Edited by Amigo-A, 10 July 2021 - 12:15 AM.

through the site

https://dropmefiles.com/

Verry tks!

I send 2 originals and two encrypted copies to the following link: https://dropmefiles.com/GByak

Thank you very much!

Waiting is not decryptable, the crypto is secure...

Edited by Amigo-A, 10 July 2021 - 02:03 PM.

Topic title changed to reflect naming convention and direct other victims to this support topic.

Hello, I have many important .docx files that have been encrypted by the .waiting ransomware and would like to have them decrypted.  I would appreciate any help in this regard.  Thanks.

Yes, below is a (typed) copy of the message.  (I could find no option here to attach a screenshot).

Unfortunately, there is no known method that I am aware of to decrypt files encrypted by Waiting Ransomware without paying the ransom (not advisable) and obtaining the private encryption keys from the criminals who created the ransomware unless they are leaked or seized & released by authorities. Without the criminal's master private key that can be used to decrypt your files, decryption is impossible. That usually means the key is unique (specific) for each victim and generated in a secure way (i.e. RSA, AES, Salsa20, ChaCha20, ECDH, ECC) that cannot be brute-forced.
 

I have merged your topic into the primary support topic for victims of this ransomware.