crypt0l0cker

[Philquad]

anyone ever paid for ransomware?
a client has cryptolocker add a .encrypted extension to all jpg, doc ect
on 2 computers, through the share
very nasty, i recovered most of 1 pc using shadowcopy but the other is a mess
maybe i can recover some of it, still trying

$1000 i see they want for ransom, had to install tor to see the page, they let you decrypt 1 file free (wow)
i have till 11-6 to pay 1.2 bitcoin (1000 aus) or $2000 after that

luckily they have a contact lol, i asked how can i be sure they wont just take the money after all they are extortionists right?

[fandtm666]

have you tried the file recovery option ??

apparently it makes a copy - encrypts - deletes original

so maybe a dos based file recovery program may work

[Philquad]

im running it now
restore would have worked but i had a backup program running to a usb drive, but his removed it
now system restore is looking for the usb

[umby75]

My friend's pc has been infected by this ransomware and her files was encrypted as .crypt.
I tried to use Gomason (I'm not sure if it's the exact name) and another for .crypt cryptation.
I also tried the Kaspersky tool the Rannah Decrypter but I didn't get the files crypted.
It seems to me that Shadow Copy was not available.
Do you know how can I get the files?

Sent from Note 4 device - Rome - Italy

[Philquad]

its probably no use but
identify

then try

also in properties of a folder try "previous version"
or hope you have a backup

[mtv]

umby75

Please respond to the other thread you started on CCTV.

You are beginning to sound like a troll/spammer.

[Philquad]

i must admit, im thrilled with Dr web's service
it cost 200$ to but the rescue pack (av for 2yrs + decryption tool)
but it decrypted all his files, i hope
theres 50,000 odd