How to recover files after a ransomware virus?

R

Rinsewind2015-03-17 15:08:52

Malware

Rinsewind, 2015-03-17 15:08:52

Good afternoon!
Yesterday a Trojan was caught that encrypted all the documents into a ".vault" container.
Is it possible to recover data if the public key and random_seed remain from the malware? In addition, there are originals of some files.

Reply

Answer the question

In order to leave comments, you need to log in

4 answer(s)

V

Vladimir Martyanov, 2015-03-17
@vilgeforce

No, it's GPG.

A

Andrey Ermachenok, 2015-03-17
@eapeap

Is there a decryptor for infected files named *[email protected]?

D

Denis Verbin, 2015-03-22
@rez0n

Search the node and kaspersky forums.
There are themed threads.
If the encryptor uses a non-unique key, there is a chance that this key was posted on the forum, if it is unique like BTC-locker, only backup or buying a key from the author of the virus will restore your file.

M

mace-ftl, 2016-04-05
@mace-ftl

Here on the screenshots is a real ransomware virus - in short, give me money ...
But seriously - backups, only backups!