Windows 10: Victims of four file-encrypting malware can retrieve their files

Borg 386 · Sep 28, 2019

People who have fallen victim to FortuneCrypt, Yatron, WannaCryFake or Avest ransomware should now be able to retrieve their encrypted files without giving into the extortion demands of cyber attackers.

Three of the decryption tools have been released for free as part of No More Ransom, a joint initiative by tech security companies and law enforcement that is designed to help businesses and consumers in the fight against cybercrime.

Now more free decryption tools have been added to the No More Ransom arsenal, as Kaspersky Lab has provided tools for decrypting Yatron and FortuneCrypt, while Emsisoft has released a free decryptor for WannaCryFake.
Click to expand...

Hit by ransomware? Victims of these four types of file-encrypting malware can now retrieve their files for free | ZDNet

:)

Veeshush · Sep 28, 2019

CryptoLocker Ransomware - File-encrypting malware

According to reports from security firms, CryptoLocker is most often spread through booby-trapped email attachments, but the malware also can be deployed by hacked and malicious Web sites by exploiting outdated browser plugins.

The trouble with CryptoLocker is not so much in removing the malware — that process appears to be surprisingly trivial in most cases. The real bummer is that all of your important files — pictures, documents, movies, MP3s — will remain scrambled with virtually unbreakable encryption unless and until you pay the ransom demand, which can range from $100 to $300 (and payable only in Bitcoins).

File-encrypting malware is hardly new. This sort of diabolical threat has been around in various incarnations for years, but it seems to have intensified in recent months. For years, security experts have emphasized the importance of backing up one’s files as a hedge against disaster in the wake of a malware infestation. Unfortunately, if your backup drives are connected physically or via the local network to the PC that gets infected with CryptoLocker, your backups may also be encrypted as well.

Computers infected with CryptoLocker may initially show no outward signs of infection; this is because it often takes many hours for the malware to encrypt all of the files on the victim’s PC and attached or networked drives. When that process is complete, however, the malware will display a pop-up message similar to the one pictured above, complete with a countdown timer that gives victims a short window of time in which to decide whether to pay the ransom or lose access to the files forever.
Click to expand...

How To Avoid CryptoLocker Ransomware — Krebs on Security

Basically guys, the ransomware isn't that hard to remove, however, all your files are left encrypted.

There's also other links for more information and even a tool to help prevent infection in the link above.

Borg 386 · Sep 28, 2019

RansomWarrior victims can now retrieve files for free

Victims of a new form of ransomware that appeared just weeks ago can now retrieve their encrypted files without having to pay a bitcoin ransom.

Discovered in early August, RansomWarrior appears to be the work of hackers working out of India, if the inclusion of
"Have a good day with the love from India" on the ransom note is to be believed.

The file-locking malware targets Microsoft Windows users and is delivered to victims via an executable named 'A Big Present.exe' which, if run, will encrypt files with a .THBEC extension.
Click to expand...

Researchers at Check Point analysed RansomWarrior and found it to be the work of seemingly inexperienced attackers, and were able to retrieve the decryption keys from the malware.

Check Point succeeded due to the weak encryption used by the ransomware, which is a stream cipher that uses a key randomly generated from 1000 hard-coded keys in the RansomWarrior binary code.

As the key's index is saved locally on the victim's computer to provide the means of unlocking the files, researchers have been able to build a decryption tool for anyone infected by RansomWarrior.
Click to expand...

Read more: Cracking ransomware: RansomWarrior victims can now retrieve files for free | ZDNet

troyrae360 · Sep 28, 2019

Windows XP file encryption

My suggestion to you is to look into what kind of encryption the program used, and look for a way to break that type of encryption. Sorry I can't say a specific program for sure.
Click to expand...

LOL thanks, I think its standard windows XP file encryption

Windows 10: Victims of four file-encrypting malware can retrieve their files

Victims of four file-encrypting malware can retrieve their files

Victims of four file-encrypting malware can retrieve their files

Victims of four file-encrypting malware can retrieve their files

Victims of four file-encrypting malware can retrieve their files - Similar Threads - Victims four file

How can I retrieve encrypted files from old hard drive

How can I retrieve encrypted files from old hard drive

Malware or possible hotnet victim?

encrypt malware

How Can I Retrieve WD 2TB Passport Encrypted Files?

RansomWarrior victims can now retrieve files for free

Shrug ransomware victim? How to retrieve your locked files for free

Encrypted Malware

TeslaCrypt ransomware victims can now decrypt their files for free