Elektroda.pl
Elektroda.pl
X
Proszę, dodaj wyjątek dla www.elektroda.pl do Adblock.
Dzięki temu, że oglądasz reklamy, wspierasz portal i użytkowników.

Wirus jak odzyskać pliki zdjecia

25 Lip 2019 14:45 351 15
  • Poziom 4  
    Mój komputer zaatakował wirus i pozmienial rozszerzenie moich plików na .novasof zna może ktoś sposób jak odzyskać pliki.
  • Poziom 4  
    Pozmienial .jpg .png .doc .txt .pdf i jeszcze kilka innych nie mam pliku z okupem.
  • Pomocny dla użytkowników
    Może się udać odzyskać pliki zgodnie z tym atrtykułem: http://www.myantispyware.com/2019/07/25/novas...-virus-restore-decrypt-novasof-files/#decrypt
    Ale to zależy jak zostały zaszyfrowane.

    Dodano po 1 [minuty]:

    Przemomon napisał:
    nie mam pliku z okupem.

    W folderach powinieneś mieć plik _readme.txt
  • Poziom 4  
    screen Wirus jak odzyskać pliki zdjecia

    Dodano po 2 [minuty]:

    jest
    ATTENTION!

    Don't worry, you can return all your files!
    All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
    The only method of recovering files is to purchase decrypt tool and unique key for you.
    This software will decrypt all your encrypted files.
    What guarantees you have?
    You can send one of your encrypted file from your PC and we decrypt it for free.
    But we can decrypt only 1 file for free. File must not contain valuable information.
    You can get and look video overview decrypt tool:
    https://we.tl/t-o7ClqIH7RS
    Price of private key and decrypt software is $980.
    Discount 50% available if you contact us first 72 hours, that's price for you is $490.
    Please note that you'll never restore your data without payment.
    Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.


    To get this software you need write on our e-mail:
    gorentos(malpa)bitmessage.ch

    Reserve e-mail address to contact us:
    gorentos2(malpa)firemail.cc

    Our Telegram account:
    @datarestore
    Mark Data Restore

    Your personal ID:
    127uYpfHsd2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4
  • Poziom 17  
    uuu, świeżynka, pierwsze ataki zaledwie tydzień temu. Wrzuć plik z okupem Tutaj w celu analizy.
    speedy9 napisał:
    W folderach powinieneś mieć plik _readme.txt

    albo *.hta
  • Poziom 4  
    [+] Loaded 59 offline keys
    Please archive the following info in case of future decryption:
    [*] ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4
    [*] MACs: 00:27:13:2E:4F:44, 0C:EE:E6:A5:D0:E8, 00:26:9E:74:32:C2
    This info has also been logged to STOPDecrypter-log.txt
    Selected directory: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud
    Starting decryption...

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060587.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060588.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060589.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060590.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060591.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060592.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060593.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060594.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060595.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060596.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060597.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060598.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060599.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060600.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060601.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060602.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060603.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060604.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060605.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060606.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060607.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060608.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060609.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060610.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060611.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060612.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060613.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060614.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    Decrypted 0 files!
    Skipped 28 files.

    [!] No keys were found for the following IDs:
    [*] ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )
    Please archive these IDs and the following MAC addresses in case of future decryption:
    [*] MACs: 00:27:13:2E:4F:44, 0C:EE:E6:A5:D0:E8, 00:26:9E:74:32:C2
    This info has also been logged to STOPDecrypter-log.txt
  • Poziom 15  
    Wszystkie mają jeden klucz.
    Można by przypuszczać, że pliki są zaszyfrowane kluczem OFFLINE.
    Pozostaje czekać na wydanie nowej wersji STOPDecrypter
    Autor pracuje nad aktualizacją, a infekcji przybywa.

    Jeśli nie masz konta na BleepingComputer to umieszczę w Twoim imieniu log z programu.

    Sprawdzaj temat STOP Ransomware (.STOP, .Puma, .Djvu, .Promo, .Drume) Help & Support Topic
    W pierwszym poście znajduje się link do wersji programu deszyfrującego
    W tej chwili 2.1.0.19
    Gdy pojawi się nowsza, sprawdź czy naprawi pliki.


    EDIT:
    Właśnie pojawiła się wersja STOPDecrypter 2.1.0.20
  • Poziom 4  
    Spróbuję nowszą wersja i dam znać możesz umieszczać w moim imieniu.
  • Poziom 4  
    Niestety nowsza wersja nie dała rady

    Spoiler:
    [+] Loaded 64 offline keys
    Please archive the following info in case of future decryption:
    [*] ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4
    [*] MACs: 00:27:13:2E:4F:44, 0C:EE:E6:A5:D0:E8, 00:26:9E:74:32:C2
    This info has also been logged to STOPDecrypter-log.txt
    Selected directory: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud
    Starting decryption...

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060587.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060588.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060589.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060590.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060591.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060592.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060593.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060594.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060595.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060596.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060597.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060598.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060599.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060600.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060601.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060602.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060603.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060604.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060605.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060606.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060607.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060608.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060609.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060610.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060611.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060612.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060613.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    [+] File: C:\Users\Grzegorz.Grzegorz_D\Desktop\bud\P1060614.JPG.novasof
    [-] No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )

    Decrypted 0 files!
    Skipped 28 files.

    [!] No keys were found for the following IDs:
    [*] ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )
    Please archive these IDs and the following MAC addresses in case of future decryption:
    [*] MACs: 00:27:13:2E:4F:44, 0C:EE:E6:A5:D0:E8, 00:26:9E:74:32:C2
    This info has also been logged to STOPDecrypter-log.txt

    Dodano po 47 [sekundy]:

    Unidentified ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4
    MACs: 00:27:13:2E:4F:44, 0C:EE:E6:A5:D0:E8, 00:26:9E:74:32:C2
    ----------------------------------------
    STOPDecrypter v2.1.0.20
    OS Microsoft Windows NT 6.1.7601 Service Pack 1, .NET Framework Version 4.0.30319.34209
    ----------------------------------------

    No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )
    Unidentified ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )
    MACs: 00:27:13:2E:4F:44, 0C:EE:E6:A5:D0:E8, 00:26:9E:74:32:C2
    Decrypted 0 files, skipped 28
  • Poziom 4  
    Niestety nic
    Unidentified ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4
    MACs: 00:27:13:2E:4F:44, 0C:EE:E6:A5:D0:E8, 00:26:9E:74:32:C2
    ----------------------------------------
    STOPDecrypter v2.1.0.21
    OS Microsoft Windows NT 6.1.7601 Service Pack 1, .NET Framework Version 4.0.30319.34209
    ----------------------------------------

    No key for ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )
    Unidentified ID: 2rO7wU3pETSoc80lgH8CoZyEE5CtWq3mbGc8LHu4 (.novasof )
    MACs: 00:27:13:2E:4F:44, 0C:EE:E6:A5:D0:E8, 00:26:9E:74:32:C2
    Decrypted 0 files, skipped 16

  • Poziom 40  
    iJuliusz napisał:
    Wszystkie mają jeden klucz.
    Można by przypuszczać, że pliki są zaszyfrowane kluczem OFFLINE.
    Pozostaje czekać na wydanie nowej wersji STOPDecrypter
    Autor pracuje nad aktualizacją, a infekcji przybywa.


    Nie ma na to sposobu. Musisz czekać.