Unlock for a variant of CryptoLocker

[rakman]

Another client of ours was hit by a variant of CryptoLocker, and doing some searching we found this site:

https://www.decryptcryptolocker.com/

While it didn't work on the recent client's machine, I tried it on another client's machine that had been hit a while ago and the site did produce an unlock key that worked perfectly.

While we have backups for both clients, the earlier client had a very convoluted file structure and it took some time to figure out exactly what day/time they got hit. We restored thousands of files, and once in a while we still find a file that was missed.

Give it a try if you still have files that need to be decrypted. I was skeptical, but it did work and will save me a ton of time in the future.

One thing I haven't tried is if it can do multiple files.

[falang07]

I wonder how they managed to find out the decryption keys...

[falang07]

if anyone is interested, here is how they did it: http://justhack.co.in/tag/evgeniy-bogachev

[Sayonarax]

I wonder how they managed to find out the decryption keys...

Ask the NSA why the hound encryption developers.. lots of encryption programs have a back doors.

[falang07]

Well, this time they stumbled upon some of the actual decryption keys (and they admit they were a little lucky this time), no backdoor was used since they did not recover all of them so not everyone can be served with the proper key.