Criptorbit virus (Windows PC)

For discussions about security.
Post Reply
Message
Author
User avatar
Galbi
Posts: 1098
Joined: Wed 21 Sep 2011, 22:32
Location: Bs.As. - Argentina.

Criptorbit virus (Windows PC)

#1 Post by Galbi »

Does anyone have some experience with the Criptorbit virus (in a Windows PC)?

A friend has lots of important (from his job) MS-Excel files encripted by this virus.

An "expert" worked on the machine for a week and returned it saying that was nothing to do.

I've googled and there are some apps to decryp files.

But perhaps you have some advice.

Thanks in advance.

Galbi.
Remember: [b][i]"pecunia pecuniam parere non potest"[/i][/b]

User avatar
ally
Posts: 1957
Joined: Sat 19 May 2012, 19:29
Location: lincoln, uk
Contact:

#2 Post by ally »

hey galbi

a quick goo finds that the file is not encrypted, the file header is changed

maybe try here:

http://www.malwarekillers.com/how-to-de ... bit-files/

:)

User avatar
Galbi
Posts: 1098
Joined: Wed 21 Sep 2011, 22:32
Location: Bs.As. - Argentina.

#3 Post by Galbi »

Thanks Ally, I've just downloaded the app, but I don't have access to the infected PC.

I may think that the "expert" has tried that, but there some experts that...
Remember: [b][i]"pecunia pecuniam parere non potest"[/i][/b]

cthisbear
Posts: 4422
Joined: Sun 29 Jan 2006, 22:07
Location: Sydney Australia

#4 Post by cthisbear »

Experts..............mmmmmmmmmmmmmm!!

Try >> BleepingComputer...great site

"""""

" BleepingComputer.com was one of the first support sites to have reports
of the CryptorBit, or HowDecrypt, ransomware.

At the time, though, we were unable to help as this infection has been incredibly elusive and any supposed samples would not work.

Recently, a member known as DecrypterFixer, has been able to recover some files that were supposedly encrypted by this malware.

Due to our ability to now help users with this infection we have put together
a guide that contains all known information about the CryptorBit infection."

http://www.bleepingcomputer.com/virus-r ... nformation

Chris.

Post Reply