Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. The Lounge
  3. Little buggers!

Little buggers!

Scheduled Pinned Locked Moved The Lounge
htmlcomsysadminsecurityhelp
31 Posts 22 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • M Mycroft Holmes

    If it is a work computer all relevant stuff should be backed up so only the weekend work will be at risk. Hopefully. I wonder where the grommets downloaded the malware from!

    Never underestimate the power of human stupidity RAH

    L Offline
    L Offline
    Lost User
    wrote on last edited by
    #6

    They tell me Kizi. Which to me looks like a normal games site, I'm just wondering if it has the pop-ups like 'are you sure want to leave this game' which then downloads something when you click yes. Although my knowledge of malware is limited.

    1 Reply Last reply
    0
    • L Lost User

      Let the kids play games on my Works Laptop today, to give me a little peace. Got my laptop back to find all my files are encrypted and the following message pops up every time I boot it up.

      __!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!

      NOT YOUR LANGUAGE? USE https://translate.google.com

      What happened to your files ?
      All of your files were protected by a strong encryption with RSA-4096.
      More information about the encryption keys using RSA-4096 can be found here: http://en.wikipedia.org/wiki/RSA\_(cryptosystem)

      How did this happen ?
      !!! Specially for your PC was generated personal RSA-4096 KEY, both public and private.
      !!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet.
      Decrypting of your files is only possible with the help of the private key and decrypt program, which is on our secret server.

      What do I do ?
      So, there are two ways you can choose: wait for a miracle and get your price doubled, or start obtaining BTC NOW, and restore your data easy way.
      If You have really valuable data, you better not waste your time, because there is no other way to get your files, except make a payment.

      For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below:

      1. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
      2. http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
      3. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
      4. https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
      5. https://4nauizsaaopuj3qj.tor2web.org/2287ACCCFD7C78C6
      6. https://4nauizsaaopuj3qj.onion.cab/2287ACCCFD7C78C6

      If for some reasons the addresses are not available, follow these steps:

      1. Download and install tor-browser: http://www.torproject.org/projects/torbrowser.html.en
      2. After a successful installation, run the browser and wait for initialization.
      3. Type in the address bar: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
      4. Follow the instructions on the site.

      !!! IMPORTANT INFORMATION:
      !!! Your personal pages:
      http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
      http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
      http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
      https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
      !!! Your personal page in TOR Browser: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
      !!! Your personal identification ID: 2287ACCCFD7C78C6
      00000000000000000000000000000

      As we have strict rules not al

      S Offline
      S Offline
      Steve Wellens
      wrote on last edited by
      #7

      PompeyThree wrote:

      I'll get my revenge tomorrow when they're at school by logging into their Minecraft and destroying all their villages.

      Yes, revenge is very good.

      1 Reply Last reply
      0
      • L Lost User

        Let the kids play games on my Works Laptop today, to give me a little peace. Got my laptop back to find all my files are encrypted and the following message pops up every time I boot it up.

        __!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!

        NOT YOUR LANGUAGE? USE https://translate.google.com

        What happened to your files ?
        All of your files were protected by a strong encryption with RSA-4096.
        More information about the encryption keys using RSA-4096 can be found here: http://en.wikipedia.org/wiki/RSA\_(cryptosystem)

        How did this happen ?
        !!! Specially for your PC was generated personal RSA-4096 KEY, both public and private.
        !!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet.
        Decrypting of your files is only possible with the help of the private key and decrypt program, which is on our secret server.

        What do I do ?
        So, there are two ways you can choose: wait for a miracle and get your price doubled, or start obtaining BTC NOW, and restore your data easy way.
        If You have really valuable data, you better not waste your time, because there is no other way to get your files, except make a payment.

        For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below:

        1. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
        2. http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
        3. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
        4. https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
        5. https://4nauizsaaopuj3qj.tor2web.org/2287ACCCFD7C78C6
        6. https://4nauizsaaopuj3qj.onion.cab/2287ACCCFD7C78C6

        If for some reasons the addresses are not available, follow these steps:

        1. Download and install tor-browser: http://www.torproject.org/projects/torbrowser.html.en
        2. After a successful installation, run the browser and wait for initialization.
        3. Type in the address bar: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
        4. Follow the instructions on the site.

        !!! IMPORTANT INFORMATION:
        !!! Your personal pages:
        http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
        http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
        http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
        https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
        !!! Your personal page in TOR Browser: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
        !!! Your personal identification ID: 2287ACCCFD7C78C6
        00000000000000000000000000000

        As we have strict rules not al

        J Offline
        J Offline
        Jorgen Andersson
        wrote on last edited by
        #8

        Damn parasites! :mad:

        Wrong is evil and must be defeated. - Jeff Ello

        1 Reply Last reply
        0
        • L Lost User

          Let the kids play games on my Works Laptop today, to give me a little peace. Got my laptop back to find all my files are encrypted and the following message pops up every time I boot it up.

          __!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!

          NOT YOUR LANGUAGE? USE https://translate.google.com

          What happened to your files ?
          All of your files were protected by a strong encryption with RSA-4096.
          More information about the encryption keys using RSA-4096 can be found here: http://en.wikipedia.org/wiki/RSA\_(cryptosystem)

          How did this happen ?
          !!! Specially for your PC was generated personal RSA-4096 KEY, both public and private.
          !!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet.
          Decrypting of your files is only possible with the help of the private key and decrypt program, which is on our secret server.

          What do I do ?
          So, there are two ways you can choose: wait for a miracle and get your price doubled, or start obtaining BTC NOW, and restore your data easy way.
          If You have really valuable data, you better not waste your time, because there is no other way to get your files, except make a payment.

          For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below:

          1. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
          2. http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
          3. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
          4. https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
          5. https://4nauizsaaopuj3qj.tor2web.org/2287ACCCFD7C78C6
          6. https://4nauizsaaopuj3qj.onion.cab/2287ACCCFD7C78C6

          If for some reasons the addresses are not available, follow these steps:

          1. Download and install tor-browser: http://www.torproject.org/projects/torbrowser.html.en
          2. After a successful installation, run the browser and wait for initialization.
          3. Type in the address bar: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
          4. Follow the instructions on the site.

          !!! IMPORTANT INFORMATION:
          !!! Your personal pages:
          http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
          http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
          http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
          https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
          !!! Your personal page in TOR Browser: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
          !!! Your personal identification ID: 2287ACCCFD7C78C6
          00000000000000000000000000000

          As we have strict rules not al

          R Offline
          R Offline
          R Giskard Reventlov
          wrote on last edited by
          #9

          If all the important stuff is backed up at work, maybe you'd be better 'accidently' dropping the laptop into a large and very muddy puddle... like the channel. :-)

          1 Reply Last reply
          0
          • L Lost User

            Let the kids play games on my Works Laptop today, to give me a little peace. Got my laptop back to find all my files are encrypted and the following message pops up every time I boot it up.

            __!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!

            NOT YOUR LANGUAGE? USE https://translate.google.com

            What happened to your files ?
            All of your files were protected by a strong encryption with RSA-4096.
            More information about the encryption keys using RSA-4096 can be found here: http://en.wikipedia.org/wiki/RSA\_(cryptosystem)

            How did this happen ?
            !!! Specially for your PC was generated personal RSA-4096 KEY, both public and private.
            !!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet.
            Decrypting of your files is only possible with the help of the private key and decrypt program, which is on our secret server.

            What do I do ?
            So, there are two ways you can choose: wait for a miracle and get your price doubled, or start obtaining BTC NOW, and restore your data easy way.
            If You have really valuable data, you better not waste your time, because there is no other way to get your files, except make a payment.

            For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below:

            1. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
            2. http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
            3. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
            4. https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
            5. https://4nauizsaaopuj3qj.tor2web.org/2287ACCCFD7C78C6
            6. https://4nauizsaaopuj3qj.onion.cab/2287ACCCFD7C78C6

            If for some reasons the addresses are not available, follow these steps:

            1. Download and install tor-browser: http://www.torproject.org/projects/torbrowser.html.en
            2. After a successful installation, run the browser and wait for initialization.
            3. Type in the address bar: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
            4. Follow the instructions on the site.

            !!! IMPORTANT INFORMATION:
            !!! Your personal pages:
            http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
            http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
            http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
            https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
            !!! Your personal page in TOR Browser: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
            !!! Your personal identification ID: 2287ACCCFD7C78C6
            00000000000000000000000000000

            As we have strict rules not al

            S Offline
            S Offline
            Steve Wellens
            wrote on last edited by
            #10

            If UK laws are like US laws, a felony has been committed. You should report it to the UK equivalent of the FBI.

            9 1 Reply Last reply
            0
            • L Lost User

              Let the kids play games on my Works Laptop today, to give me a little peace. Got my laptop back to find all my files are encrypted and the following message pops up every time I boot it up.

              __!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!

              NOT YOUR LANGUAGE? USE https://translate.google.com

              What happened to your files ?
              All of your files were protected by a strong encryption with RSA-4096.
              More information about the encryption keys using RSA-4096 can be found here: http://en.wikipedia.org/wiki/RSA\_(cryptosystem)

              How did this happen ?
              !!! Specially for your PC was generated personal RSA-4096 KEY, both public and private.
              !!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet.
              Decrypting of your files is only possible with the help of the private key and decrypt program, which is on our secret server.

              What do I do ?
              So, there are two ways you can choose: wait for a miracle and get your price doubled, or start obtaining BTC NOW, and restore your data easy way.
              If You have really valuable data, you better not waste your time, because there is no other way to get your files, except make a payment.

              For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below:

              1. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
              2. http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
              3. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
              4. https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
              5. https://4nauizsaaopuj3qj.tor2web.org/2287ACCCFD7C78C6
              6. https://4nauizsaaopuj3qj.onion.cab/2287ACCCFD7C78C6

              If for some reasons the addresses are not available, follow these steps:

              1. Download and install tor-browser: http://www.torproject.org/projects/torbrowser.html.en
              2. After a successful installation, run the browser and wait for initialization.
              3. Type in the address bar: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
              4. Follow the instructions on the site.

              !!! IMPORTANT INFORMATION:
              !!! Your personal pages:
              http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
              http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
              http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
              https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
              !!! Your personal page in TOR Browser: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
              !!! Your personal identification ID: 2287ACCCFD7C78C6
              00000000000000000000000000000

              As we have strict rules not al

              C Offline
              C Offline
              Chris Maunder
              wrote on last edited by
              #11

              You had it all backed-up, though, right? And the backups weren't on a connected drive? (Yeah - we've been through that too!)

              cheers Chris Maunder

              J 1 Reply Last reply
              0
              • L Lost User

                Looks like the only way to get the files back is to pay (not that paying would guarantee this, they're criminals afterall). Luckily I don't have files that are not recoverable from other places, it's just a major PITA. So no they won't be getting any money.

                OriginalGriffO Offline
                OriginalGriffO Offline
                OriginalGriff
                wrote on last edited by
                #12

                PompeyThree wrote:

                So no they won't be getting any money

                Good! We had one victim here last year in QA - he had paid them, but the decryption key they sold him didn't work... Even if it did, would you trust them not to leave enough on your system to repeat the process next month? After all, they know you will pay, so you are a repeat customer after all! :laugh: Scumbags. Shooting is too good for 'em.

                Bad command or file name. Bad, bad command! Sit! Stay! Staaaay...

                "I have no idea what I did, but I'm taking full credit for it." - ThisOldTony
                "Common sense is so rare these days, it should be classified as a super power" - Random T-shirt

                1 Reply Last reply
                0
                • L Lost User

                  Let the kids play games on my Works Laptop today, to give me a little peace. Got my laptop back to find all my files are encrypted and the following message pops up every time I boot it up.

                  __!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!

                  NOT YOUR LANGUAGE? USE https://translate.google.com

                  What happened to your files ?
                  All of your files were protected by a strong encryption with RSA-4096.
                  More information about the encryption keys using RSA-4096 can be found here: http://en.wikipedia.org/wiki/RSA\_(cryptosystem)

                  How did this happen ?
                  !!! Specially for your PC was generated personal RSA-4096 KEY, both public and private.
                  !!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet.
                  Decrypting of your files is only possible with the help of the private key and decrypt program, which is on our secret server.

                  What do I do ?
                  So, there are two ways you can choose: wait for a miracle and get your price doubled, or start obtaining BTC NOW, and restore your data easy way.
                  If You have really valuable data, you better not waste your time, because there is no other way to get your files, except make a payment.

                  For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below:

                  1. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                  2. http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
                  3. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                  4. https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
                  5. https://4nauizsaaopuj3qj.tor2web.org/2287ACCCFD7C78C6
                  6. https://4nauizsaaopuj3qj.onion.cab/2287ACCCFD7C78C6

                  If for some reasons the addresses are not available, follow these steps:

                  1. Download and install tor-browser: http://www.torproject.org/projects/torbrowser.html.en
                  2. After a successful installation, run the browser and wait for initialization.
                  3. Type in the address bar: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
                  4. Follow the instructions on the site.

                  !!! IMPORTANT INFORMATION:
                  !!! Your personal pages:
                  http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                  http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
                  http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                  https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
                  !!! Your personal page in TOR Browser: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
                  !!! Your personal identification ID: 2287ACCCFD7C78C6
                  00000000000000000000000000000

                  As we have strict rules not al

                  G Offline
                  G Offline
                  GuyThiebaut
                  wrote on last edited by
                  #13

                  I would just give the straight story. After all it was your kids and not some friend in a competing company who you leant your laptop to for a weekend. Spinning a story probably won't feel comfortable and 'white lies' have a tendency of developing a life of their own which then needs to be kept alive. Saying what happened won't be comfortable either but I think most people would understand that letting kids play on a computer is fairly normal and you will get to keep your sense of integrity. Good luck :thumbsup:

                  “That which can be asserted without evidence, can be dismissed without evidence.”

                  ― Christopher Hitchens

                  N 1 Reply Last reply
                  0
                  • L Lost User

                    Let the kids play games on my Works Laptop today, to give me a little peace. Got my laptop back to find all my files are encrypted and the following message pops up every time I boot it up.

                    __!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!

                    NOT YOUR LANGUAGE? USE https://translate.google.com

                    What happened to your files ?
                    All of your files were protected by a strong encryption with RSA-4096.
                    More information about the encryption keys using RSA-4096 can be found here: http://en.wikipedia.org/wiki/RSA\_(cryptosystem)

                    How did this happen ?
                    !!! Specially for your PC was generated personal RSA-4096 KEY, both public and private.
                    !!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet.
                    Decrypting of your files is only possible with the help of the private key and decrypt program, which is on our secret server.

                    What do I do ?
                    So, there are two ways you can choose: wait for a miracle and get your price doubled, or start obtaining BTC NOW, and restore your data easy way.
                    If You have really valuable data, you better not waste your time, because there is no other way to get your files, except make a payment.

                    For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below:

                    1. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                    2. http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
                    3. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                    4. https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
                    5. https://4nauizsaaopuj3qj.tor2web.org/2287ACCCFD7C78C6
                    6. https://4nauizsaaopuj3qj.onion.cab/2287ACCCFD7C78C6

                    If for some reasons the addresses are not available, follow these steps:

                    1. Download and install tor-browser: http://www.torproject.org/projects/torbrowser.html.en
                    2. After a successful installation, run the browser and wait for initialization.
                    3. Type in the address bar: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
                    4. Follow the instructions on the site.

                    !!! IMPORTANT INFORMATION:
                    !!! Your personal pages:
                    http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                    http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
                    http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                    https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
                    !!! Your personal page in TOR Browser: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
                    !!! Your personal identification ID: 2287ACCCFD7C78C6
                    00000000000000000000000000000

                    As we have strict rules not al

                    H Offline
                    H Offline
                    HobbyProggy
                    wrote on last edited by
                    #14

                    F*ck, those dumb ransom Viruses are bad, really bad, i once tried decrypting a 2048 RSA, took ages and got aborted before i nearly reached the key. The police in germany says better pay as long as it's cheap, maybe you'll get the data back otherwise they also can't do anything about it. BTW: Hope you didn't plug it in at work, otherwise this B**tard might spread across the company, we had such an issue here, had to disconect 10 machines and reinstall them by hand after cleaning everything off. Thank god it didn't hit a server.

                    Rules for the FOSW ![^]

                    if(this.signature != "")
                    {
                    MessageBox.Show("This is my signature: " + Environment.NewLine + signature);
                    }
                    else
                    {
                    MessageBox.Show("404-Signature not found");
                    }

                    C 1 Reply Last reply
                    0
                    • L Lost User

                      Let the kids play games on my Works Laptop today, to give me a little peace. Got my laptop back to find all my files are encrypted and the following message pops up every time I boot it up.

                      __!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!

                      NOT YOUR LANGUAGE? USE https://translate.google.com

                      What happened to your files ?
                      All of your files were protected by a strong encryption with RSA-4096.
                      More information about the encryption keys using RSA-4096 can be found here: http://en.wikipedia.org/wiki/RSA\_(cryptosystem)

                      How did this happen ?
                      !!! Specially for your PC was generated personal RSA-4096 KEY, both public and private.
                      !!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet.
                      Decrypting of your files is only possible with the help of the private key and decrypt program, which is on our secret server.

                      What do I do ?
                      So, there are two ways you can choose: wait for a miracle and get your price doubled, or start obtaining BTC NOW, and restore your data easy way.
                      If You have really valuable data, you better not waste your time, because there is no other way to get your files, except make a payment.

                      For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below:

                      1. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                      2. http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
                      3. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                      4. https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
                      5. https://4nauizsaaopuj3qj.tor2web.org/2287ACCCFD7C78C6
                      6. https://4nauizsaaopuj3qj.onion.cab/2287ACCCFD7C78C6

                      If for some reasons the addresses are not available, follow these steps:

                      1. Download and install tor-browser: http://www.torproject.org/projects/torbrowser.html.en
                      2. After a successful installation, run the browser and wait for initialization.
                      3. Type in the address bar: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
                      4. Follow the instructions on the site.

                      !!! IMPORTANT INFORMATION:
                      !!! Your personal pages:
                      http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                      http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
                      http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                      https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
                      !!! Your personal page in TOR Browser: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
                      !!! Your personal identification ID: 2287ACCCFD7C78C6
                      00000000000000000000000000000

                      As we have strict rules not al

                      P Offline
                      P Offline
                      Pete OHanlon
                      wrote on last edited by
                      #15

                      What no one has addressed is how poor the SecOps team have been in leaving your laptop open to vulnerabilities like this. A half decent SecOps team will ensure that devices are secured to a point where attack vectors like this cannot happen. Let this be a salutary lesson for them that they need to protect devices - it's too easy for someone to get something nefarious into a system if they leave gaping holes like this.

                      This space for rent

                      1 Reply Last reply
                      0
                      • C Chris Maunder

                        You had it all backed-up, though, right? And the backups weren't on a connected drive? (Yeah - we've been through that too!)

                        cheers Chris Maunder

                        J Offline
                        J Offline
                        Jorgen Andersson
                        wrote on last edited by
                        #16

                        Yet another reason to keep using Tape backups.

                        Wrong is evil and must be defeated. - Jeff Ello

                        L 1 Reply Last reply
                        0
                        • L Lost User

                          Let the kids play games on my Works Laptop today, to give me a little peace. Got my laptop back to find all my files are encrypted and the following message pops up every time I boot it up.

                          __!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!

                          NOT YOUR LANGUAGE? USE https://translate.google.com

                          What happened to your files ?
                          All of your files were protected by a strong encryption with RSA-4096.
                          More information about the encryption keys using RSA-4096 can be found here: http://en.wikipedia.org/wiki/RSA\_(cryptosystem)

                          How did this happen ?
                          !!! Specially for your PC was generated personal RSA-4096 KEY, both public and private.
                          !!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet.
                          Decrypting of your files is only possible with the help of the private key and decrypt program, which is on our secret server.

                          What do I do ?
                          So, there are two ways you can choose: wait for a miracle and get your price doubled, or start obtaining BTC NOW, and restore your data easy way.
                          If You have really valuable data, you better not waste your time, because there is no other way to get your files, except make a payment.

                          For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below:

                          1. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                          2. http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
                          3. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                          4. https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
                          5. https://4nauizsaaopuj3qj.tor2web.org/2287ACCCFD7C78C6
                          6. https://4nauizsaaopuj3qj.onion.cab/2287ACCCFD7C78C6

                          If for some reasons the addresses are not available, follow these steps:

                          1. Download and install tor-browser: http://www.torproject.org/projects/torbrowser.html.en
                          2. After a successful installation, run the browser and wait for initialization.
                          3. Type in the address bar: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
                          4. Follow the instructions on the site.

                          !!! IMPORTANT INFORMATION:
                          !!! Your personal pages:
                          http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                          http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
                          http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                          https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
                          !!! Your personal page in TOR Browser: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
                          !!! Your personal identification ID: 2287ACCCFD7C78C6
                          00000000000000000000000000000

                          As we have strict rules not al

                          R Offline
                          R Offline
                          Rob Philpott
                          wrote on last edited by
                          #17

                          Do you know what they did that led to this outcome?

                          Regards, Rob Philpott.

                          J 1 Reply Last reply
                          0
                          • R Rob Philpott

                            Do you know what they did that led to this outcome?

                            Regards, Rob Philpott.

                            J Offline
                            J Offline
                            Johnny J
                            wrote on last edited by
                            #18

                            Why? You wanna try it out? :confused:

                            Anything that is unrelated to elephants is irrelephant
                            Anonymous
                            -----
                            The problem with quotes on the internet is that you can never tell if they're genuine
                            Winston Churchill, 1944
                            -----
                            I'd just like a chance to prove that money can't make me happy.
                            Me, all the time

                            R 1 Reply Last reply
                            0
                            • J Johnny J

                              Why? You wanna try it out? :confused:

                              Anything that is unrelated to elephants is irrelephant
                              Anonymous
                              -----
                              The problem with quotes on the internet is that you can never tell if they're genuine
                              Winston Churchill, 1944
                              -----
                              I'd just like a chance to prove that money can't make me happy.
                              Me, all the time

                              R Offline
                              R Offline
                              Rob Philpott
                              wrote on last edited by
                              #19

                              Not really, although I have backups of backups. And all my data is garbage anyway. No, I just want to know how you get a laptop to do this. Don't open dodgy attachments, don't run anything which looks like an executable from the net. Make sure things are signed. I would think that would be enough. I'm curious about rumours that all you have to do is a hit a 'bad' webpage with your browser in order to get infected. How does that work? Presumably the days of buffer overrun etc. are over, and the browser vets its feed.

                              Regards, Rob Philpott.

                              M D 2 Replies Last reply
                              0
                              • H HobbyProggy

                                F*ck, those dumb ransom Viruses are bad, really bad, i once tried decrypting a 2048 RSA, took ages and got aborted before i nearly reached the key. The police in germany says better pay as long as it's cheap, maybe you'll get the data back otherwise they also can't do anything about it. BTW: Hope you didn't plug it in at work, otherwise this B**tard might spread across the company, we had such an issue here, had to disconect 10 machines and reinstall them by hand after cleaning everything off. Thank god it didn't hit a server.

                                Rules for the FOSW ![^]

                                if(this.signature != "")
                                {
                                MessageBox.Show("This is my signature: " + Environment.NewLine + signature);
                                }
                                else
                                {
                                MessageBox.Show("404-Signature not found");
                                }

                                C Offline
                                C Offline
                                chriselst
                                wrote on last edited by
                                #20

                                HobbyProggy wrote:

                                BTW: Hope you didn't plug it in at work, otherwise this B**tard might spread across the company, we had such an issue here, had to disconect 10 machines and reinstall them by hand after cleaning everything off. Thank god it didn't hit a server.

                                Many, many years ago the company I worked for had their servers down for 3 days after a virus swarmed through the network. Fortunately I was away on my honeymoon at the time. Turned out it was the CEO who had let his kids on his laptop then brought it into the office and plugged it in to the network.

                                Some men are born mediocre, some men achieve mediocrity, and some men have mediocrity thrust upon them.

                                1 Reply Last reply
                                0
                                • L Lost User

                                  Let the kids play games on my Works Laptop today, to give me a little peace. Got my laptop back to find all my files are encrypted and the following message pops up every time I boot it up.

                                  __!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!

                                  NOT YOUR LANGUAGE? USE https://translate.google.com

                                  What happened to your files ?
                                  All of your files were protected by a strong encryption with RSA-4096.
                                  More information about the encryption keys using RSA-4096 can be found here: http://en.wikipedia.org/wiki/RSA\_(cryptosystem)

                                  How did this happen ?
                                  !!! Specially for your PC was generated personal RSA-4096 KEY, both public and private.
                                  !!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet.
                                  Decrypting of your files is only possible with the help of the private key and decrypt program, which is on our secret server.

                                  What do I do ?
                                  So, there are two ways you can choose: wait for a miracle and get your price doubled, or start obtaining BTC NOW, and restore your data easy way.
                                  If You have really valuable data, you better not waste your time, because there is no other way to get your files, except make a payment.

                                  For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below:

                                  1. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                                  2. http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
                                  3. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                                  4. https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
                                  5. https://4nauizsaaopuj3qj.tor2web.org/2287ACCCFD7C78C6
                                  6. https://4nauizsaaopuj3qj.onion.cab/2287ACCCFD7C78C6

                                  If for some reasons the addresses are not available, follow these steps:

                                  1. Download and install tor-browser: http://www.torproject.org/projects/torbrowser.html.en
                                  2. After a successful installation, run the browser and wait for initialization.
                                  3. Type in the address bar: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
                                  4. Follow the instructions on the site.

                                  !!! IMPORTANT INFORMATION:
                                  !!! Your personal pages:
                                  http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                                  http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
                                  http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                                  https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
                                  !!! Your personal page in TOR Browser: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
                                  !!! Your personal identification ID: 2287ACCCFD7C78C6
                                  00000000000000000000000000000

                                  As we have strict rules not al

                                  M Offline
                                  M Offline
                                  Member 11683251
                                  wrote on last edited by
                                  #21

                                  Depending on which ransom ware it is and which version there might be a miniscule chance to get the data back. I remember reading about one version of ransom ware in which the private key was stored on the computer. But it might just have been temporarily and it would later get deleted but worth a shot googling the issue. Ransomware is creepy, never been much to worry about viruses but these buggers got me ultra paranoid.

                                  1 Reply Last reply
                                  0
                                  • G GuyThiebaut

                                    I would just give the straight story. After all it was your kids and not some friend in a competing company who you leant your laptop to for a weekend. Spinning a story probably won't feel comfortable and 'white lies' have a tendency of developing a life of their own which then needs to be kept alive. Saying what happened won't be comfortable either but I think most people would understand that letting kids play on a computer is fairly normal and you will get to keep your sense of integrity. Good luck :thumbsup:

                                    “That which can be asserted without evidence, can be dismissed without evidence.”

                                    ― Christopher Hitchens

                                    N Offline
                                    N Offline
                                    Nelek
                                    wrote on last edited by
                                    #22

                                    GuyThiebaut wrote:

                                    I think most people would understand that letting kids play on a computer is fairly normal and you will get to keep your sense of integrity.

                                    Except of if laptop is company ware and the boss is a jerk. Then you probably are going to have an unpleasant day.

                                    M.D.V. ;) If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about? Help me to understand what I'm saying, and I'll explain it better to you Rating helpful answers is nice, but saying thanks can be even nicer.

                                    1 Reply Last reply
                                    0
                                    • R Rob Philpott

                                      Not really, although I have backups of backups. And all my data is garbage anyway. No, I just want to know how you get a laptop to do this. Don't open dodgy attachments, don't run anything which looks like an executable from the net. Make sure things are signed. I would think that would be enough. I'm curious about rumours that all you have to do is a hit a 'bad' webpage with your browser in order to get infected. How does that work? Presumably the days of buffer overrun etc. are over, and the browser vets its feed.

                                      Regards, Rob Philpott.

                                      M Offline
                                      M Offline
                                      megaadam
                                      wrote on last edited by
                                      #23

                                      I think browsers are fairly safe from buffer overrun exploits these days. Most of today's ransomware uses a simple approach: Simple banner flashing "OLD DRIVERS DETECTED" or "YOU MUST FIX YOUR SLOW COMPUTER" etc and then "download to fix" so them kids downloaded an exe and ran it.

                                      Life is too shor

                                      1 Reply Last reply
                                      0
                                      • L Lost User

                                        Let the kids play games on my Works Laptop today, to give me a little peace. Got my laptop back to find all my files are encrypted and the following message pops up every time I boot it up.

                                        __!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!

                                        NOT YOUR LANGUAGE? USE https://translate.google.com

                                        What happened to your files ?
                                        All of your files were protected by a strong encryption with RSA-4096.
                                        More information about the encryption keys using RSA-4096 can be found here: http://en.wikipedia.org/wiki/RSA\_(cryptosystem)

                                        How did this happen ?
                                        !!! Specially for your PC was generated personal RSA-4096 KEY, both public and private.
                                        !!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet.
                                        Decrypting of your files is only possible with the help of the private key and decrypt program, which is on our secret server.

                                        What do I do ?
                                        So, there are two ways you can choose: wait for a miracle and get your price doubled, or start obtaining BTC NOW, and restore your data easy way.
                                        If You have really valuable data, you better not waste your time, because there is no other way to get your files, except make a payment.

                                        For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below:

                                        1. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                                        2. http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
                                        3. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                                        4. https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
                                        5. https://4nauizsaaopuj3qj.tor2web.org/2287ACCCFD7C78C6
                                        6. https://4nauizsaaopuj3qj.onion.cab/2287ACCCFD7C78C6

                                        If for some reasons the addresses are not available, follow these steps:

                                        1. Download and install tor-browser: http://www.torproject.org/projects/torbrowser.html.en
                                        2. After a successful installation, run the browser and wait for initialization.
                                        3. Type in the address bar: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
                                        4. Follow the instructions on the site.

                                        !!! IMPORTANT INFORMATION:
                                        !!! Your personal pages:
                                        http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                                        http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
                                        http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                                        https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
                                        !!! Your personal page in TOR Browser: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
                                        !!! Your personal identification ID: 2287ACCCFD7C78C6
                                        00000000000000000000000000000

                                        As we have strict rules not al

                                        Sander RosselS Offline
                                        Sander RosselS Offline
                                        Sander Rossel
                                        wrote on last edited by
                                        #24

                                        PompeyThree wrote:

                                        I'll get my revenge tomorrow when they're at school by logging into their Minecraft and destroying all their villages.

                                        Best teach them a thing or two about secure internet usage instead to prevent it from happening again...

                                        Visit my blog at Sander's bits - Writing the code you need. Or read my articles at my CodeProject profile.

                                        Simplicity is prerequisite for reliability. — Edsger W. Dijkstra

                                        Regards, Sander

                                        1 Reply Last reply
                                        0
                                        • L Lost User

                                          Let the kids play games on my Works Laptop today, to give me a little peace. Got my laptop back to find all my files are encrypted and the following message pops up every time I boot it up.

                                          __!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!__!@#!@#!

                                          NOT YOUR LANGUAGE? USE https://translate.google.com

                                          What happened to your files ?
                                          All of your files were protected by a strong encryption with RSA-4096.
                                          More information about the encryption keys using RSA-4096 can be found here: http://en.wikipedia.org/wiki/RSA\_(cryptosystem)

                                          How did this happen ?
                                          !!! Specially for your PC was generated personal RSA-4096 KEY, both public and private.
                                          !!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet.
                                          Decrypting of your files is only possible with the help of the private key and decrypt program, which is on our secret server.

                                          What do I do ?
                                          So, there are two ways you can choose: wait for a miracle and get your price doubled, or start obtaining BTC NOW, and restore your data easy way.
                                          If You have really valuable data, you better not waste your time, because there is no other way to get your files, except make a payment.

                                          For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below:

                                          1. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                                          2. http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
                                          3. http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                                          4. https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
                                          5. https://4nauizsaaopuj3qj.tor2web.org/2287ACCCFD7C78C6
                                          6. https://4nauizsaaopuj3qj.onion.cab/2287ACCCFD7C78C6

                                          If for some reasons the addresses are not available, follow these steps:

                                          1. Download and install tor-browser: http://www.torproject.org/projects/torbrowser.html.en
                                          2. After a successful installation, run the browser and wait for initialization.
                                          3. Type in the address bar: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
                                          4. Follow the instructions on the site.

                                          !!! IMPORTANT INFORMATION:
                                          !!! Your personal pages:
                                          http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                                          http://krfdnhfnsai3d.abeleros.com/2287ACCCFD7C78C6
                                          http://aynfksddnnfwkd.jockmias.com/2287ACCCFD7C78C6
                                          https://4nauizsaaopuj3qj.onion.to/2287ACCCFD7C78C6
                                          !!! Your personal page in TOR Browser: 4nauizsaaopuj3qj.onion/2287ACCCFD7C78C6
                                          !!! Your personal identification ID: 2287ACCCFD7C78C6
                                          00000000000000000000000000000

                                          As we have strict rules not al

                                          Z Offline
                                          Z Offline
                                          ZurdoDev
                                          wrote on last edited by
                                          #25

                                          A simple google search indicates a potential fix. RSA-4096 Virus Ransomware Removal - HowToRemove.Guide[^]

                                          There are only 10 types of people in the world, those who understand binary and those who don't.

                                          1 Reply Last reply
                                          0
                                          Reply
                                          • Reply as topic
                                          Log in to reply
                                          • Oldest to Newest
                                          • Newest to Oldest
                                          • Most Votes


                                          • Login

                                          • Don't have an account? Register

                                          • Login or register to search.
                                          • First post
                                            Last post
                                          0
                                          • Categories
                                          • Recent
                                          • Tags
                                          • Popular
                                          • World
                                          • Users
                                          • Groups