Windows 10: New ransomware lets you decrypt your files — by infecting other users

Discus and support New ransomware lets you decrypt your files — by infecting other users in AntiVirus, Firewalls and System Security to solve the problem; Just when you thought ransomware couldn't get any nastier *Shock The malware dubbed "Popcorn Time" locks your Windows computer's files with... Discussion in 'AntiVirus, Firewalls and System Security' started by Borg 386, Dec 11, 2016.

  1. BORG 386
    Borg 386 Win User

    New ransomware lets you decrypt your files — by infecting other users


    Just when you thought ransomware couldn't get any nastier *Shock

    New ransomware lets you decrypt your files — by infecting other users | ZDNet

    :)
     
    Borg 386, Dec 11, 2016
    #1
  2. QUIETMAN7 - MVP
    quietman7 - MVP Win User

    How to Decrypt *.cerber3 files?

    Any files that are encrypted with Cerber Ransomware will be renamed with 10 random characters plus the
    .cerber (i.e. 2C1OlcaXdF.cerber, Ku7dYlcvkj.cerber) or .cerber2 extension (see

    here    ) appended to the end of the encrypted data filename and leave files (ransom notes) named DECRYPT MY FILES#.vbs, DECRYPT MY FILES#.txt, DECRYPT MY FILES#.html.

    The newest variant of Cerber Ransomware will have a .cerber3 extension appended to the end of the encrypted data filename and leave files (ransom notes) named # HELP DECRYPT #.txt, # HELP DECRYPT #.html, and # HELP DECRYPT
    #.url.

    Trend Micro released a
    Ransomware File Decryptor     for victims of earlier Cerber infections but it has limitations...must be used on the infected machine, may take several hours to complete decryption, some files may be only partially decrypted.
    However, victims of Cerber Ransomware have reported the decryption tool does not work on cerber3 encrypted files.

    In cases where a decryption tool does not work and you do not plan on paying the ransom, the only other alternative is to
    backup/save your data as is and wait for a possible breakthrough...meaning, what seems like an impossibility at the moment (decryption of your data), there is always hope someday there may be a potential solution so save the encrypted data
    and wait until that time. Imaging the drive backs up everything related to the infection including encrypted files, ransom notes and registry entries containing possible information which may be needed if a solution is ever discovered.

    There is an ongoing discussion in this topic where you can ask questions and seek further assistance. Other victims have been directed there to share information, experiences and suggestions.

     
    quietman7 - MVP, Dec 11, 2016
    #2
  3. QUIETMAN7 - MVP
    quietman7 - MVP Win User
    quietman7 - MVP, Dec 11, 2016
    #3
  4. DENCAL
    dencal Win User

    New ransomware lets you decrypt your files — by infecting other users

    Could be used by some embittered Facebook, or other social media site member seeking vengeance, having been humiliated on line.
     
    dencal, Dec 11, 2016
    #4
  5. SIMRICK
    simrick Win User
    So set up a couple VMs and infect them; get your stuff back for free; kill the VMs. *Wink
     
    simrick, Dec 11, 2016
    #5
  6. ANDRETEN
    AndreTen Win User
    Doesn't work like this, unfortunately *Sad Only after they get paid, they give keys to decrypt...
    Sick busters *Mad
     
    AndreTen, Dec 12, 2016
    #6
  7. SIMRICK
    simrick Win User
    *Sad buggers
     
    simrick, Dec 12, 2016
    #7
  8. MOXIEMOMMA
    MoxieMomma Win User

    New ransomware lets you decrypt your files — by infecting other users

    Tempting, so tempting....

    <YES, I'm just kidding>

    Seriously, this stuff gets worse by the day.
    It really is an "arms race" with the criminals.

    Sigh.
     
    MoxieMomma, Apr 5, 2018
    #8
Thema:

New ransomware lets you decrypt your files — by infecting other users

Loading...

  1. New ransomware lets you decrypt your files — by infecting other users - Similar Threads - ransomware lets decrypt

  2. How to Decrypt Cerber3 Ransomware Files

    in Windows 10 Gaming
    How to Decrypt Cerber3 Ransomware Files: Eight years ago, my computer was attacked by ransomware, and all my files were encrypted. The extension .cerber3 was added to all the files. I tried many solutions available on the internet, including various decryptors, but none of them worked effectively. However, I managed...

  3. How to Decrypt Cerber3 Ransomware Files

    in Windows 10 Software and Apps
    How to Decrypt Cerber3 Ransomware Files: Eight years ago, my computer was attacked by ransomware, and all my files were encrypted. The extension .cerber3 was added to all the files. I tried many solutions available on the internet, including various decryptors, but none of them worked effectively. However, I managed...

  4. Files infected with .uyjh ransomware

    in AntiVirus, Firewalls and System Security
    Files infected with .uyjh ransomware: aAll of my files are infected with .uyjh ransomware. Is there any chance that I can decrypt my files? The attached fig shows how its has changes the extension of one of my file...

  5. Ransomware infected file recovery

    in AntiVirus, Firewalls and System Security
    Ransomware infected file recovery: My all files encrypted to .iisa extension I'm want my files back please help me out for this regards https://answers.microsoft.com/en-us/protect/forum/all/ransomware-infected-file-recovery/69c55fd5-9120-4efe-8b74-8b1cb91c80da

  6. Ransomware .mpal files decryption solution

    in AntiVirus, Firewalls and System Security
    Ransomware .mpal files decryption solution: Hi, My laptop running on Win10 has been infiltrated by a ransomware and all files have been encrypted and renamed with extension .mpal with a ransom text in every folder. I have managed to remove virus files through antivirus scan and also manually remove from registry but...

  7. What should you do if your PC is infected form Ransomware

    in AntiVirus, Firewalls and System Security
    What should you do if your PC is infected form Ransomware: Ransomware infection can be pretty scary. If you see a note appear on your computer screen telling you that the computer is locked, or that your files are encrypted, don't panic. Instead, take a deep breath, sit down and consider your options. Find out what kind of...

  8. Infected by ransomware having .lapoi extension. Need help to decrypt.

    in AntiVirus, Firewalls and System Security
    Infected by ransomware having .lapoi extension. Need help to decrypt.: Split from this thread. My laptop was infected by ransomware having .lapoi extension.I back up all my files and reinstall the system. I need help to decrypt my file with .lapoi extension...

  9. Ransomware decryption

    in AntiVirus, Firewalls and System Security
    Ransomware decryption: [ATTACH]Hi everybody! My computers are affected by ransomware jaic which its complete name is in the inline image above, scanned by Kaspersky lab. Does anybody know if there is a decryptor for this ransomware??? Thank you in advance...

  10. ALERT!: New ransomware allows one user file 'free' decrypt

    in AntiVirus, Firewalls and System Security
    ALERT!: New ransomware allows one user file 'free' decrypt: New ransomware allows one user file 'free' decrypt By Dimitri Reijerman , Sunday, November 16, 2014 14:26 , comments: 201 , Views: 31,371 • Feedback Security firms Webroot has a new ransomware-variant found that the user after encrypting the data from surreptitious...