October 29, 201411 yr Another client of ours was hit by a variant of CryptoLocker, and doing some searching we found this site: https://www.decryptcryptolocker.com/ While it didn't work on the recent client's machine, I tried it on another client's machine that had been hit a while ago and the site did produce an unlock key that worked perfectly. While we have backups for both clients, the earlier client had a very convoluted file structure and it took some time to figure out exactly what day/time they got hit. We restored thousands of files, and once in a while we still find a file that was missed. Give it a try if you still have files that need to be decrypted. I was skeptical, but it did work and will save me a ton of time in the future. One thing I haven't tried is if it can do multiple files.
October 30, 201411 yr if anyone is interested, here is how they did it: http://justhack.co.in/tag/evgeniy-bogachev
October 30, 201411 yr I wonder how they managed to find out the decryption keys... Ask the NSA why the hound encryption developers.. lots of encryption programs have a back doors.
October 30, 201411 yr Well, this time they stumbled upon some of the actual decryption keys (and they admit they were a little lucky this time), no backdoor was used since they did not recover all of them so not everyone can be served with the proper key.
Create an account or sign in to comment