Posts

Recovering After Ransomware

  Ransomware is a computer malware virus that locks down your system and demands a ransom in order to unlock your files. Essentially there are two different types. Firstly PC-Locker which locks the whole machine and Data-Locker which encrypts specific data, but allows the machine to work. The main objective is to exhort money from the user, paid normally in a cryptocurrency such as bitcoin. Identification and Decryption You will firstly need to know the family name of the ransomware that has infected you. This is easier than it seems. Simply search malwarehunterteam and upload the ransom note. It will detect the family name and often guide you through the decryption. Once you have the family name, matching the note, the files can be decrypted using Teslacrypt 4.0. Firstly the encryption key will need to be set. Selecting the extension appended to the encrypted files will allow the tool to set the master key automatically. If in doubt, simply select <as original>. Data Recovery I