help.decrypt
#11
(Nov 17, 2015, 10:02 am)NokTham Wrote: Perhaps I should replicate the problem and test the theory myself? The results might be surprising.

Please
Big GrinBig GrinBig GrinBig GrinBig GrinBig GrinBig GrinBig GrinBig GrinBig GrinBig GrinBig GrinBig GrinBig Grin
I just can't hardly Wait
do you need to get directions where to get Infected or not?

PS: I have some of the files that fortunately infected by one, I can get some of the shit if you want it
Reply
#12
System Restore can create backups to your files?
Reply
#13
System Restore is to restore your OS PC conditions in your OS Installations Directories (C:\ for examples)
you need creates some restore point at some time so SR can revert back to that point
Reply
#14
(Nov 17, 2015, 11:23 am)Picklock Wrote: System Restore is to restore your OS PC conditions in your OS Installations Directories (C:\ for examples)
you need creates some restore point at some time so SR can revert back to that point

I don't think System Restore would help him anyway...
I have seen this virus, and it doesn't affect other files, except multimedia ones (mp3, mp4, avi and so on..). Also, starting with Windows 7 (or Vista), OS's files can't be modified nor deleted (I know that, because years ago I tried to make a virus that supposed to delete c:\WINDOWS: no file or directory has been deleted. The same result in c:\Users (with some exceptions)).
Reply
#15
The point is which is still part of the "mystery"
what kind of method that the "Thing" is used when attached and modify the binary of the files that it infected and which parts of the files binary that it modified which if it's found out it will become possible to restores it to the original states

the "Fact" that it did not give any "harms" to multimedia files still in vague since no one have been reported it yet or maybe it isn't any, that's maybe the only clues how to get this thing off.
Reply
#16
Hmm... Okay...
Reply
#17
Come on, seriously... Cryptowall does not infect only media files, were did you get such info? It can encrypt any file type. And the way it encrypts the files is very well known and documented, this isn't something new...
Reply
#18
I got porn stash still playable while the jpeg cover cannot
hmm
indeed it's isn't something new but the version is updated and every updated versions does "have something new" in it.
try for yourself then.
I always love when someone does that kind of thing
PS:
there's some peoples that keep the latest versions of this virus in the Internet available for anyone that wish to take the challenge
Reply
#19
Yeh, latest known is v4.0

Leaving this here for the OP http://www.bleepingcomputer.com/download/listcwall/

By the way, it's what I do for a living.
Reply
#20
(Nov 17, 2015, 20:01 pm)NokTham Wrote: http://www.bleepingcomputer.com/download/listcwall/
convenient
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  [split] help.decrypt jamieross 1 9,940 Mar 02, 2016, 18:55 pm
Last Post: stormium



Users browsing this thread: 1 Guest(s)