04-15-2015, 12:33 PM
A tool for reversing the encryption process of CoinVault crypto-malware is currently available for download, with new decryption keys being added as the investigation advances. <source>
(04-15-2015, 12:33 PM)GuiltySpark Wrote: [ -> ]A tool for reversing the encryption process of CoinVault crypto-malware is currently available for download, with new decryption keys being added as the investigation advances. <source>
Quote: Hi GuiltySpark,
could you elaborate on this, for example would it be sensible to remove all other devices from the network for fear of infecting those computers ?
Quote: Also where it says enter data here how exactly would a victim do that ? simply copy and paste a word document say ? Or how would someone enter their data ?
(09-18-2015, 12:18 PM)GuiltySpark Wrote: [ -> ]Quote: Hi GuiltySpark,
could you elaborate on this, for example would it be sensible to remove all other devices from the network for fear of infecting those computers ?
Yes. Very sensible I have seen ransom ware spread through a network and destroy entire HDDs.
Quote: Also where it says enter data here how exactly would a victim do that ? simply copy and paste a word document say ? Or how would someone enter their data ?
When the "lock page" shows up telling you are infected, blah, blah encrypted blah...
At the top left of the "lock screen" is a tab / button saying view encrypted files list select this and you can highlight the files to check.
A full PDF explaining it is available on their site you can download it below.
(05-20-2016, 12:21 AM)Peter_Dk Wrote: [ -> ]looks like Eset just relase a decryto tool for tesla crypt
as you can see here https://www.eset.co.uk/Press-Centre/News/Article/ESET-Releases-Decryptor-for-Recent-Variants-of-TeslaCrypt-Ransomware
(04-15-2015, 01:01 PM)Britec Wrote: [ -> ]I will sticky this topic
(06-09-2016, 05:49 PM)cetycora Wrote: [ -> ](04-15-2015, 01:01 PM)Britec Wrote: [ -> ]I will sticky this topic
Hi,
Recently my sister has been the victim of Cerber Ransomware, it deleted all shadow copies and restore points.
I tried to recover the files using ShadowExplorer and Recuva.
The first tool didn't work.
Recuva showed me most of the files but when I recovered them they were damaged.
Sadly, she didn't have backup of the files.
Do you know any Cerber Ransomware Decryption Tool?
Thank you in advance.