[laurx]

Faililaiend wq2k, meiliaadressiks artilkiling1984@protonmail.com mingi id on ka antud.. kellelgi puudet?

U kolme tunni pärast jõuan masinani.

Dear computer users.

All your files were encrypted.

The cost of decryption directly depends on how quickly you write us.

To show you that we can help you, send us 3 files that do not contain a valuable infomation. Files such as photos or text files.

We do not recommend restarting your computer, installing antivirus software, or changing file names. All of these actions can cause grant file loss.

Q: Did not receive an answer?
A: Check the SPAM folder.

Q: My spam folder is empty, what should I do?
A: Write us with a new email, preferably with protonmail.com


contact emails


To: artilkilin1984@protonmail.com, artilkilin@tuta.io
faililaiend on selline.

Dear computer users.

All your files were encrypted.

The cost of decryption directly depends on how quickly you write us.

To show you that we can help you, send us 3 files that do not contain a valuable infomation. Files such as photos or text files.

We do not recommend restarting your computer, installing antivirus software, or changing file names. All of these actions can cause grant file loss.

Q: Did not receive an answer?
A: Check the SPAM folder.

Q: My spam folder is empty, what should I do?
A: Write us with a new email, preferably with protonmail.com


contact emails


To: artilkilin1984@protonmail.com, artilkilin@tuta.io

failitüüp: WQ2K-fail (.wq2k)

[Freezedude]

Alusta sellest: https://id-ransomware.malwarehunterteam.com

[laurx]

B2DR on tulemus. sellega on vist kehvasti.

[Freezedude]

Kui krüpteeritud materjalide hulgas midagi hoidmise tähtsusega on, siis riiulisse hoiule. Pahavara analüütikud võivad mingil hetkel ka antud lunavara jaoks lahenduse leida.

[laurx]

see mõte käis ka peast läbi.

[LKits]

[von Wu]

Saada see kiri cert.ee-sse ka edasi.

[laurx]

Plaan oli. Mul pole sellele w2k3 servule litsentsi..

[Freezedude]

[laurx]

Jõudsin just kolaga tartu tagasi, magan pea selgeks ja hakkan harutama, et mis ja kust taastada saab ja kes peapeki pihta saama hakkab..


kui kettad kloonitud saan, vaatan mis shaddowexplorer teha mõistab. kirjelduse järgi keeras see asi küll shaddow copy tuksi aga mine tea...

[SirShark]

Kusjuures, olen näinud ka kus on shadowexplorer pekki keeratud, aga recuvaga on kätte saadud. Pahatihti on nii, et krüptod teevad ju failidest koopiad, krüpteerivad need, ja kustutavad originaalid ära.

[laurx]

ma lammutasin raidi seti ära ja jätan ühe ketta enda kätte. eks vähehaaval hakkab vaatama, mis saab sellest asjast. dwg d ja mingid andmebaasi laiendiga asjad jäid lahti.

[Bunny]

https://www.nomoreransom.org/et/decryption-tools.html
https://www.nomoreransom.org/crypto-sheriff.php?lang=et
ehk on abi

[laurx]

tänud. kuidas läheb, annan teada.

mind see leht ei aita.