[Boards: 3 / a / aco / adv / an / asp / b / biz / c / cgl / ck / cm / co / d / diy / e / fa / fit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mu / n / news / o / out / p / po / pol / qa / r / r9k / s / s4s / sci / soc / sp / t / tg / toy / trash / trv / tv / u / v / vg / vp / vr / w / wg / wsg / wsr / x / y ] [Home]
4chanarchives logo
Helping a friend with this shit Ransomware. What do?
Images are sometimes not shown due to bandwidth/network limitations. Refreshing the page usually helps.
The stories and information posted here are artistic works of fiction and falsehood.
Only a fool would take anything posted here as fact.
You are currently reading a thread in /b/ - Random

Thread replies: 255
Thread images: 49
File: image.jpg (306 KB, 750x1334) Image search: [Google]
image.jpg
306 KB, 750x1334
Helping a friend with this shit
Ransomware.

What do?
>>
your friend deserves to be fucked

im not helping your dumbass friend
>>
>>692445230
Install gentoo
>>
>>692445230
Pay the monies
>>
>>692445412
How does this even happen? I download tranny beastiality porn from the scum of the deep darkies and i never had this happen
>>
>>692445230
just click the "forgot my password" button on the encryption and follow the instructions
>>
>>692445230
you should have updated to windows 10
>normie
>>
>>692445777
trips don't lie
>>
>>692445230
anti-malware software to get rid of it if your friend doesn't care about losing the data

pay the fuckers if ur friend doesn't want to lose his shit.
>>
i dare someone to visit the websites in the pic and post a screenshot
>>
>>692445777
i did. used it for a few months, then updated again to linux
>>
>>692445230
Fabian?
>>
>>692445955
VM starting up boys
>>
How do you even get this stuff
>>
>>692446046
The legend
>>
>>692445955
im game.

ill be at the cardstand in 30 minutes
>>
>>692445230
he can easily get his files out and reset his computer by literally installing gentoo.
>>
i tried linux for a couple months loved it but not enough game support and program compatibility. 10/10 for cheap laptop though
>>
>>692446046
Muh nigga
>>
>>692446046
Do it.
>>
Don't be an idiot. If you have anything valuable, online backups. If its more private or business related, offline physical backups on separate hard drives/external systems.

This shit is only going to become more and more common in the coming years. Protect yourself while you can, be ready to format your Desktop with a fresh start at all times basically.
>>
>>692445230
>Start in safe mode
>Reset pc 24 hours
>???
>Profit
>>
File: 5820.png (188 KB, 999x768) Image search: [Google]
5820.png
188 KB, 999x768
>>692446102
Delivering
>>
File: shot-20160701-18514-ecovuy.jpg (16 KB, 1280x800) Image search: [Google]
shot-20160701-18514-ecovuy.jpg
16 KB, 1280x800
>>692445955
>>
Boot in safemode w/o or w/ networking, can't remember, and run HitmanPro, MalwareBytes, etc.
>>
File: download (3).jpg (8 KB, 232x217) Image search: [Google]
download (3).jpg
8 KB, 232x217
>>692445230
i wanna see where this goes
>>
File: 5821.png (189 KB, 992x776) Image search: [Google]
5821.png
189 KB, 992x776
>>692446295
>55
>dubs
nice
>>
>>692445230
burn it before it infects your phone and tv and dog
>>
>>692446125
Are you retarded? It encrypts the files, no way to realistically decrypt without a fucking supercomputer. Even then, once they crack their encryption, they just change their methods again.
>>
>>692446444
trips of truth
>>
>>692445910
That is fucking stupid. Don't ever pay these niggers.
You have no guarantee that youll get your shit back.

>>692446292
What this anon said should actually work just fine. Maybe reset the pc 72 h or a week. Hard to know when you got the fbimoneypack style virus.
>>
>>692446399
I'm happy to see they are security conscious.
>>
File: cerber.webm (3 MB, 998x776) Image search: [Google]
cerber.webm
3 MB, 998x776
>>692446399
>>
>>692446444
*on screen*
-RANSOM NOT PAID
-DOGGER HACKED
>>
>>692446478
Don't be stupid. This shit is only software side. Highly unlikely for it to have gotten to the bios. It's likely they're encrypted only within Windows.
>>
Delete the folder system 32, its an dangerous virus.
>>
Tape paper over the camera, that's all I can offer for you. If they have that much control they most likely have control of the webcam.
>>
>>692446606
My god, that's a lot of cash.
>>
>>692446606
>delivering webm

mah nigga
>>
>>692446683
sooo just reinstall windows?
>>
>>692446683
OP uses linux tho
>>
>>692446606
you got a webm, i'm flattered
>>
>>692446770
Yeah but youd lose all your shit
>>
>>692446737
only way to fix it is to delete it than butter and microwave computer
>>
File: 5822.png (206 KB, 1000x776) Image search: [Google]
5822.png
206 KB, 1000x776
>>692446556
>That is fucking stupid. Don't ever pay these niggers.
>You have no guarantee that youll get your shit back.
not op, not paying them. however if upu get hit with ransomware and *need* the files, upu may as well pay them. most active ransomware operators do good on their promise to fix it simply because if they didn't, the scam wouldn't pay as well.

pic related

>>692446829
was quicker than taking two or three screenshots :^)
>>
>>692446606
You're the best
>>
>>692446778
yeh, you can tell because of the white on black text
>>
>>692446835
welp this is why you always have an external hhd or ssd
>>
>>692446770
No. Install gentoo, or mint or ubuntu whatever dirstro. you can just run it from a flash drive. Get your shit out, and reinstall windows.
>>
>>692446683
Only way to get the files without paying is to remove the malware, then system restore and hope your backups didn't get fucked.

If it was as easy as installing some Linux distro to get your files back, it would be plastered all over the web to put PuppyLinux on a CD/flash drive and plug it in.
>>
>>692446295
You da man anon
>>
>>692446918
GET 1 PORN FILE OUT
>>
File: 5823.png (205 KB, 994x769) Image search: [Google]
5823.png
205 KB, 994x769
>>692446918
HOPE OP WASN'T HOPING TO USE THE "DECRYPT ONE FILE FOR FREE" FEATURE :^)
>>
>>692446918
Check the source code of the site. It might give hints on what the process is or possibly even isolate the software.
>>
File: Picard2379.jpg (279 KB, 768x820) Image search: [Google]
Picard2379.jpg
279 KB, 768x820
>>692446918
i'm very proud of you i feel like i'm getting a tour
>>
File: Tom-Jerry-Suicide.jpg (28 KB, 294x283) Image search: [Google]
Tom-Jerry-Suicide.jpg
28 KB, 294x283
>>692447192
>Mastertroll.
>>
>>692447192
>Anonymous 07/01/16(Fri)05:34:43 No.692447192 ▶
>File: 5823.png (205 KB, 994x769)
>>>692446918
>HOPE OP WASN'T HOPING TO USE THE "DECRYPT ONE FILE FOR FREE" FEATURE :^)
OH NO
>>
>>692447192
fucking kek
>>
>>692447216
Or stop being retarded and google the name you see on the front? These guys are asking $500 per person, its obvious they had the funds to pay whoever made a public facing website for them secure as fuck

Cerber ransomware. Its one of the bigger ones going around right now. Its very well known how it works, only problem is its just not viable to try to crack the encryption
>>
>>692447115
Yeah you may be right. If that is the case, it is highly unlikely for OP to be able to remove the malware.
>>
>>692447192
Keked
>>
File: 5824.png (205 KB, 992x770) Image search: [Google]
5824.png
205 KB, 992x770
>>692447192
oops wrong file extension, trying again

>>692447216
decryption is all gonna be server-side. I have js disabled so there's no chance that they're doing client-side, not that any malware operator would be that fucking stupid (i hope).
>>
>>692447556
Good point
>>
>>692447461
if you can find the program couldn't you just reverse the steps it takes to decrypt the files? i'm not computer whiz kid but it seems pretty obvious to me
>>
>>692447556
Also, how do you figure this shit is being spread around?`
>>
>>692445670
I've only ever seen this this from bad firewalls or pirating games.

Videos and pictures don't work for this
>>
>>692447871
downloading taylor swift.mp3.rar.exe(NO VIRUS!!!)
>>
>>692447556
every once in a while one of these funny clever nig/g/ers come to b and i have a good laugh because they are fearless and im a pussy
>>
>>692447779
Nope not that easy, the decryption key is probably held server side and they probably send you a program pre-loaded with the right decryption key once you pay.
>>
>>692447962
I had a quality Kek
>>
>>692447931
I installed The Witness from TPB and got ransomware. I know it was The Witness because
1) The installer was written in russian.
2) I didn't pirate or install anything sketchy otherwise.

I don't usually pirate games, but he was whining about piracy on Twitter and it pissed me off.
>>
File: 5825.png (184 KB, 997x772) Image search: [Google]
5825.png
184 KB, 997x772
>>692447556
decryption error :(

guess i can't cuck op out of his do it for free file decryption since idk the public cerber used which i'd need to make something the server can actually decrypt

>>692447779
no bc it uses public key encryption. Public key encryption is only reversible using the associated private key.

maybe if cerber used private key encryption, but it doesn't. ransomware is srs bsns

>>692447871
op is probably a pedophile who clicked on "ONLY-4-BUT-SUCH-A-WHORE.MP4.EXE"

>>692448028
the malware operators aren't gonna try to spread shit via this site bc then people wouldn't go to the site. its in their best interest to keep it clean.

plus im running linux and accessing the site via Tor through a sandboxed Tor browser so my risk would be low as fuck even if they were.
>>
>>692447779
They know what it does. But without the key they use to encrypt the files, there could quite literally be more possible combinations than there are atoms in the entire universe. Brute forcing that obviously isn't viable for each Average Joe that gets his laptop stuck with this shit.

https://blog.malwarebytes.com/threat-analysis/2016/03/cerber-ransomware-new-but-mature/
>>
File: 1465536554838.jpg (80 KB, 600x803) Image search: [Google]
1465536554838.jpg
80 KB, 600x803
the worst virus/malware I ever got disabled my keyboard and I couldn't right click as well as the general no internet connection and computer not being able to stay on for longer than 5min.

don't even ask me how i fucking fixed it. i didn't even restore windows or format. took me over a day though
>>
>>692446295
Nice. Continue
>>
>>692445230
Restore backups
>>
>>692448372
how did you fix it man?
i need to know
>>
>>692448372
Mine was it set my homepage to "lolitafap,com" or something like that, back when I was 12. We only had the one computer, and I was a single child and my mom was out of the picture. I don't recall how I fixed it. Magnets may have been involved.
>>
>>692448372
How did you go about fucking fixing that?!
>>
File: 5827.png (163 KB, 996x771) Image search: [Google]
5827.png
163 KB, 996x771
>>692448372
>>692448538
of course.

i opened a support ticket
>>
>>692445230
>you understand all importance
Fucking dumbass indians
>>
File: siV0Yc0.jpg (48 KB, 350x350) Image search: [Google]
siV0Yc0.jpg
48 KB, 350x350
>>692448819
>>
>>692448819
kekkle
>>
File: 1464409990267.gif (729 KB, 716x620) Image search: [Google]
1464409990267.gif
729 KB, 716x620
>>692448819
>>
>>692448756
the worst i had happend two days ago

it fucking took out my os and now im at my aunts to fix it and im still gonna lose all my porn
>>
File: ohboi.png (271 KB, 384x411) Image search: [Google]
ohboi.png
271 KB, 384x411
>>692448819
>>
>>692447931
Ive "liberated" games off torrent sites in the tune of 4tbs, and never seen one of these, and i do download russian warez as well. Then again i have a professional grade firewall used on my home shit
>>
>>692448963
Just rip out the HDD and transfer over your porn. No need to loose something so precious.
>>
File: 5828.png (199 KB, 1277x784) Image search: [Google]
5828.png
199 KB, 1277x784
>>692448819
not a lot of faq questions.

hope they respond to my support question soon.
>>
>>692445230
I got hit with some similar shit (Ransomware, but with a different warning/payment info. screen and .ccc file extensions that made all of the files on my hard drive inaccessible - and I had a fucking 1TB hard drive that was almost completely fully) and from what I gathered this shit is legitimate and was, at the time last year, basically impossible to decrypt without the decryption key. However, there are some awesome people on BleepinComputer dot com who have been working on this shit and they were able to crack/decrypt several of the encryptions for the Ransomware variation that was going around at the time.

So, I would suggest that you and/or your buddy get your ass over to the Bleepingcomputer forums and start asking for help and providing information about the particular Ransomware virus that your buddy got hit with, because this shit is no joke!
>>
File: fot.jpg (6 KB, 194x259) Image search: [Google]
fot.jpg
6 KB, 194x259
>>692448372
>>
Oooh boy OP, your friend fucked up big time.
>>
This was a very informative thread
>>
>>692449154
mines a ssd so i cant
plus my main is a laptop so i can dowlnoad images on chrome and i have a cloud so im not worried
>>
>>692449256
Keep creating tickets
>nice tabs
>>
>>692449556
I don't get it, why does having a SSD mean you can't pull it out?
>>
>>692449284
please dont advertise here go to tumblr

if this is legit call me a fag and a cuck
>>
>>692449256
It's not the size, it's how you use it
>>
>>692449699
I'm guessing the ssd is soldered into the thing. like flash memory on apple stuff
>>
>>692449284
Yeah I was going to mention this but wasn't sure how reliable it would be. I've heard of a few having their keys released by Law Enforcement / Cracked by security experts/ or straight up leaked by the owner because he was done pulling the scam and sites being opened run by security experts to decrypt files for you, but its unknown how many of these will ever be made public before the vanish into history.

May be good to keep the encrypted files, maybe one day someone will release the keys
>>
File: 5829.png (9 KB, 331x104) Image search: [Google]
5829.png
9 KB, 331x104
>>692449256
nothing on the homepage, in case anyone was wondering.

>>692448963
nigger just get an external hdd, put any linux distro on a flash drive, boot up linux, copy the porn to the external hdd, reinstall windows and copy the porn back.

it's not rocket science.

>>692449631
kek, okay.

one sentence replies to this post will be put together to form a message to the haxxers :^)

I'll start:

Hi.
>>
>>692449898
>ssd
>soldered
top kek
>>
>>692449256
You do gods work anon, stay comfy /b/rother
>>
>>692449284
continued.... Also, from what I recall from the research I did while I was going through this shit last year, there was a story about a police station that got hit with some form of Ransomware and the shit was so difficult to crack/decrypt, that the police station actually paid the ransom to be able to get the decryption key to be able to access their files. So, please know that this is not some amateur bullshit. These hackers are major.

Like I mentioned in my previous post, though, the good people on BleepingComputer are some smart motherfuckers who work diligently to fight this type of shit and they were able to come up with a way to decrypt several of the encryption extensions at the time. And maybe they will be able to help you and your boy with the shit that his computer got hit with. So, get the fuck over there now!
>>
>>692449699
i dont need to
i have a cloud so all of my porn is safe
dont worry anon
>>
>>692449948
cocks
>>
>>692449953
i mean, some devices have that...

right? :d
>>
>>692450034
ah well, that's good, i suppose.
>>
>>692449948
One sentence or one word?
>>
>>692449948
i'm kind of tempted to write a script to spam the support ticket section; maybe with some markov chain bible verses.

is it guarded with a captcha or is that one at the beginning the only captcha?
>>
>>692450101
i think you mean eMMC flash or whats it called on low end netbooks
>>
>>692449948
fuck you i told yall i have a fucking cloud so all of my porn is safe as fuck even if i have to format
read my words you illitarate nigger
>>
>>692449948
Thank you for encrypting my pedo friend's computer
>>
Bleepingcomputer had saved my family a fortune. All the pictures from Chad's graduation, just gone, up in smoke. Bleepingcomputers forum has saved my family so much trouble and hassle. GET THE FUCK OVER THERE.
>>
I used to be a cuck, until bleepingcomputer uncucked me. Now my wife even sucks my dick again! GO THE FUCK TO BLEEPINGCOMPUTER
>>
>>692450287
no u
>>
>>692450287
I once booked a flight to Hawaii for a 2 week R&R sesh, completely forgot to hire someone to take care of my dog. I would have had to cancel the trip but Bleeping Computer happily volunteered to watch my dog, free of charge!

They're good guys, I can confirm - so get over there!
>>
>>692450373
no
u
>>
>>692449795
You are a fag and a cuck. I would love to be smart enough to be one of the hardcore motherfuckers on BleepinComputer who work to decrypt this shit, but I was fucking devastated when my computer got hit with Ransomware and I had no fucking clue what to even try to do about it.

Seriously, I'm not advertising for BleepinComputer for any personal benefit, I'm just advertising that the people on their are the good guys and they try to help people who get hit with this awful fucking shit.

No joke, I'm just trying to be helpful, because I remember how fucking miserable it was to get hit with this shit.

If you Google "Ransomware .ccc" I'm pretty sure that BleepinComputer will be the first result, and it's because they are popular with fighting this shit.

To the OP, do a Google search for that and then go over there and check it out. You have nothing to lose.


>>692449899
Also, yes, IT IS MOST DEFINITELY A GOOD IDEA TO KEEP THE ENCRYPTED FILES! Copy them over to an external hard drive, is possible, as you can run the decryption key on any fold you direct the decryption program to (of which a guy on BleepinComputer created one).

Definitely, though, SAVE THE ENCRYPTED FILES in case they figure out a way to decrypt them!

Good luck!
>>
>>692449119
Firewall wouldn't save you if you authorize the program to run after you DL it.
Which is, you know, the presumed purpose.
>>
File: 5830.png (142 KB, 903x721) Image search: [Google]
5830.png
142 KB, 903x721
>>692449948


>>692450166
either. idc.

>>692450024
>there was a story about a police station that got hit with some form of Ransomware and the shit was so difficult to crack/decrypt, that the police station actually paid the ransom to be able to get the decryption key to be able to access their files. So, please know that this is not some amateur bullshit. These hackers are major.
pls dont give it more credit than it deserves.

>the shit was so difficult to crack/decrypt
no shit, it's RSA public key encryption. cryptographers and computer science nerds have known that shit is secure for decades.

>So, please know that this is not some amateur bullshit
first year computer science student should be able to write a program to utilize public key encryption like this. Give them 30 minutes reading about crypters and they'll be able to make it reasonably antivirus proof. isn't any big deal.

>These hackers are major.
MAJOR HAX BRO. HACK THE PLANET!
>>
>>692450420
HAHAHAHAHHAHA
>>
Looks like you just taped black paper with white lettering on your screen.
>>
File: 1466612126937.jpg (73 KB, 625x469) Image search: [Google]
1466612126937.jpg
73 KB, 625x469
>>692450533
>>
>>692448819
Fucking kek kek
>>
>>692445230
If the enrypted already did its job its eighter pay or format c. No other option..even with linux as dual os ur files are encrypted.. means they are in some scetchy other type of format that needs a pgp key to decrypt. So getting then out with another os leaves u still with encrypted data that is worthless and unopenable.
>>
>>692450450
if you are not advertising why the fuck are you spamming bleeping computer
im sure the're good decrypters but if you spam (and dont give link) you sir are a faggot and a nigger
>>
>>692450533
send them this thread's link
also >You cucksocker monkey balls, give him his files back.
>>
My wife had an affair with a nigger. I thought my life was over, I mean A NIGGER.. but that wasn't a problem at all for the guys over at bleepingcomputer forums. They were able to get in, decrypt the aids virus, and get out in a jiffy!
>>
>>692446753
Not when you're a board member at a company. Just went to a security conference (I'm a CIO) and there was a huge lecture on this shit. 1k for 5M worth of data is definitely worth it lol
>>
first google?]

http://malwarefixes (.) com/remove-cerber-ransomware-and-decrypt-files/
>>
>>692445473
/thread
>>
>>692450665
by the time they see it this thread will most likely be a 404.
>>
File: 5831.png (142 KB, 902x723) Image search: [Google]
5831.png
142 KB, 902x723
>>692450533
gonna give it 5 more sentences before sending

>>692450491
a lot of malware will contact its control server before doing anything. if that faggot's "professional grade firewall" is configured well enough, it could prevent those types of malware from activating.
>>
File: Laughing-Meme-Face-14.png (684 KB, 2550x3300) Image search: [Google]
Laughing-Meme-Face-14.png
684 KB, 2550x3300
>>692450533
10/10
keked
>>
>>692446753
how much is it?
>>
>>692445230
Wipe the laptop, restore files from backup, get on with your life.
>inb4 I don't back up my important files
Kill yourself.
>>
>>692450752
ayy lamo
>>
>>692450652
I don't think you realize how good these guys are. I got hit with ransomware a year ago and they literally showed up in spandex with outgoing underwear to save the day. I knew I was safe the moment I saw the logo.

Sweaty fat guy in spandex was in my room for 6 hours, but once he was done he found out the encryption scheme used was several times more weak than you'd expect.

Amidst a temple of empty Mtn Dew cans and a graveyard of conquered Doritos bags, he created a cracker capable of finding the key in just a few weeks of processing time. He thanked the NSA for some reason, I don't know why.

Get over there!
>>
>>692450752
I'm the hacker known as 4chan, you're fucked.
>>
>>692450879
this
anyone who doesn't backup their shit deserves everything they get
>>
>>692447216
forget it, these fuckers know what's up, don't expect them to make stupid mistakes like that. besides if you want the source, be prepared to pay hundreds of bitcoins.
>>
>>692451015
ok i went there
and?
>>
>>692450652
Motherfucker, I'm not spamming anything. I'm just trying offer some fucking helpful information, unlike most of the other faggot jackasses on this board. And that site is the only site I came across that actually found a way to decrypt the .ccc Ransomware extension a the time. So, fuck you.

Also, I didn't think that I could post an actual link, as I thought it would be seen as spam and not let me post it. Since you mentioned it, though, I will try to find a link to the thread I checked out last year.


OP, try going here: http://www.bleepingcomputer.com/forums/t/576600/tesladecoder-released-to-decrypt-exx-ezz-ecc-files-encrypted-by-teslacrypt/?view=getnewpost


Keep in mind that this thread was for the specific .ccc encrypted extension that was popular with these Ransomware hackers at the time, so you may need to try to find a different/newer thread for the Ransomware that your buddy's computer got hit with. But be proactive and post questions and offer detailed information about the encrypted file extensions for the files on your friend's computer and try to make it easier for these guys to try to help you and your friend.
>>
>disconnect hard rive from friends computer
>hook it up to another computer
>find virus through other computer
>delete

Or instead of finding the virus just format the drive. Reinstall windows. Stay off pirate Bay until your old enough.
>>
B L E E P I N G C O M P U T E R.

Are you still that dweedish cuck who still hangs out on /b/? Then get the fuck over to bleeping computer now. JUST FUCKING DO IT. OR I WILL RAPE YOUR FUCKING FAMILY, I WILL CUT YOUR MOTHERS STOMACHE OPEN AND FUCK HER INTESTINES, BLEEPING FUCKING COMPUTER BLEEPING TO THE FUCKING BEEPING COMPUTER JUST FUCKING DO IT AND STOP BEING A FUCKING CHCK FUCKING CHRIST
>>
>>692450852
just around £430
>>
>>692446606
what the fuck thats like 450 dollars
>>
>>692451266
kek so angry
settle down you triggered cuck
>>
>>692451283
no i mean in real money
>>
>>692451015
>>692451183
ransomewarefags reporting in?

I'm a security engineer for an svalley company.. we get a few of these a month, pretty easy to fix. Even this particular malware has been fixed and documented all over the web.. it's not even 0day
>>
>>692451308
Around $570
Fuck I hope you are not American.
>>
>>692451283
For the whole computer or per GB or something?
>>
>>692451365
oh, like the Euro, top kek my friend.
I made £38,000 selling the Euro against the Dollar the other week.
>>
>>692450752
Just send it anon.
>>
>>692451412
>Decrypted files, on sale just $420/lb!
>>
>>692451347
>taking it seriously
>>
>>692450752
Please put ransomware on tumblr
>>
>>692451412
I don't fucing know...
>>
>>692451380
You're so full of shit if you say this encryption is 'easily fixed' meaning either, you fucked up some pentesting, are a fucking skid and didnt know one of your tools had ransomware in them, or you put it their yourself and know the key
>>
>>692451558
You're useless anon, get out of here.
>>
>>692451283
>>692451308
From what I recall, the ransom is initially $500, and if you don't pay it within a certain amount of time (like 3-5 days or maybe a week), it actually goes up to $1,000. And if you don't access one of the links that the hackers direct you to quickly enough, when you do go to one of them, it will indicate that the ransom has gone up, since you did not respond in time.

However, I also seem to recall someone mentioning that if you don't go to the link in time and the ransom increases, you can often negotiate with them. So if you do want to try to pay the ransom and it's gone up to $1,000, you can supposedly tell them that you don't have that much money and that they (sometimes) will then tell you that they would be willing to accept the original $500 ransom amount.

You could also try to negotiate the initial $500 ransom amount and see what they say.
>>
File: 5832.png (146 KB, 902x715) Image search: [Google]
5832.png
146 KB, 902x715
>>692450752
still waiting on a couple more sentences.

>>692451233
TeslaCrypt used private key encryption and stored the key on the victims computer. cerber uses public key encryption and stores the private key on the server.

You have no idea what you're talking about: KILL YOURSELF YOU RETARDED FUCKING SHILL.
>>
>>692451347
this guy think im about to go to his ransomware ridden site

kek
>>
>>692450024
This is why I only run Windows as a virtual machinr and only run pirated shit inside said virtual machines
>>
>>692446556
>You have no guarantee that you'll get your shit back.
If word got around that they didn't undo the encryption, no one would pay up.

Gotta remember, this shit it all about getting money. The days of people just fucking with other people's computers for the lulz are over.
>>
>>692451671
REKT
E
K
T
>>
Just put in a new HD, nothing on your computer is worth shit anyway., you can reinstall everything.
Keep everything in "the cloud".
>>
>>692451671
Just kidding i love you guys will suck your dick for FREE
>>
File: 5833.png (147 KB, 905x722) Image search: [Google]
5833.png
147 KB, 905x722
>>692451671
sent
>>
>>692450670
Yea, pretty sure it's RSA.. I've heard stories of hospitals paying out tens of thousands.

>>692451588
His company probably has a cloud backup.. most svalley companies dont save to harddisk with out cloud syncing.. Also it is easy to fix if your data is backed up... Just remove the malware and delete the encrypted data.. Say an employee at fb would lose a days worth of work, maybe a week tops.
>>
>>692446556
>What this anon said should actually work just fine
Nope.
>>
>>692451671
I bet you guys can't guess how many fingers i'm holding up
>>
>>692451904
we already knew that
>>
>>692451671
You fucking idiot cocksucker, that was apparently an older variation of the Ransomware that they were using. If you read through that thread, you will see that the people on there know a lot about this shit and that they are actually trying to help others, and not be a fucking moronic piece of shit, like you are doing.

Seriously, what the fuck are you even doing in this thread? I was genuinely trying to offer some helpful information to a fellow anon. All you seem to be doing is trying to be a fucking piece of shit. Seriously, get the fuck out of here and go be a worthless scumbag cocksmoker in another thread.
>>
>>692451943
I love you, anon
>>
>>692451671
My friend doesn't have any money but agreed to suck your shit out of your fartbox for 2 months to get the key.
>>
>>692451943
You should wait for a response and make another thread with the results
>>
>>692451963
3
DID I WIN
>>
>>692451865
No they're not. I replaced all my friend's bookmarks with 9gag's dank memes.
>>
>>692452004
Everyone call this guy a fag
>>
>>692451963
2 : Thumb and index CHECKEM
>>
>>692452083
You are a fag.
>>
>>692452083
Fag
>>
>>692451943
Keep sending new ones.
>>
>>692451588
>skiddy
now that's a term I haven't heard in a long time

remember when /b/ used to be full of those? there were some pros too but they were way back in the 2k4/5 era now, it's just..... this.
>>
>>692452004
Summerino faggotrino

Dont you have homeworks to do?
>>
>>692452162
f a g
>>
>>692452083
fuck off fag
>>
>>692452083
You fucking faggot. I bet you work at a gas station or some shit and pretend to know about infosec from google searching.
>>
>>692452292
I used to be one of those until the internet actually started getting security conscious. Now it's damn near impossible to have some fun, unless you're interested in social engineering.
>>
>>692452312
are you retarded its fucking summer

that cocksmoker has no homework cause its SUMMER
>>
File: 5834.png (148 KB, 898x722) Image search: [Google]
5834.png
148 KB, 898x722
>>692451943
>>692452027
i hope they respond soon

>>692451948
>>692450670
a guy i knew a couple years ago worked doing computer repair. whenever someone would bring in the lower level ransomware that would ask for $50-$100, he'd tell them he'd fix it for $200, then use half of what they paid him to pay the ransom lel

>>692452004
TeslaCrypt used private key encryption and stored the key on the victims computer. KILL YOURSELF YOU RETARDED FUCKING SHILL. cerber uses public key encryption and stores the private key on the server. KILL YOURSELF YOU RETARDED FUCKING SHILL.

KILL YOURSELF YOU RETARDED FUCKING SHILL. You have no idea what you're talking about: KILL YOURSELF YOU RETARDED FUCKING SHILL.

KILL YOURSELF YOU RETARDED FUCKING SHILL.
>>
>>692452396
>social engineering
That's the one thing that seems to be getting easier.
>>
op, either look up info about this ransomeware on line or forget about the data

maybe this is your time to realize why you should have important data not once, not twice, not thrice, but infinite copies of it.

hope nothing important was lost.
>>
>>692448163
It's Jonathan Blow. He's the personification of modern art. Of course he was whining about piracy, he whines about everything.
>>
>>692445230

This is what I would suggest. I've thought about what would happen if this happened to me and have thought of a shitty plan. What I am about to say is hypothetical and is in no way guaranteed to work.

1) For now, you're fucked, but we might be able to get around that. You're going to need another computer. Shut Down the computer with the ransomware. For now, we're going to assume the encryption is bullshit. However we won't know that until we pull this hard drive.

2) Make sure the second computer you have is not connected to the internet in any way, shape, or form. Pull the hard drive from the computer with the ransomware and connect it as a slave to the second computer you're using.

3) Hopefully the ransomware isn't a type that spreads from PC to PC. If you're lucky, it was just bullshit and You'll be able to just pull the files from the ransomware hard drive. If there was a Windows password on it, there's ways around that. (Google it) If you're unlucky, proceed to step 4.

4) If the hard drive really is encrypted, you'll have to find a way to decrypt it which my prove a difficult task. Go around and use the suggestions found here like forms and maybe even look into brute forcing the encryption open (even if that isn't the most viable way of getting your files back).

Under NO circumstances should you plug that harddrive into that computer again without your files backed up. DON'T DO IT. At least if the hard drive is pulled, your files are safe. Just encrypted. Once your files are backed up. Plug the harddrive back in. Format. and you're done.

Good luck /b/ro.
>>
MalwareBytes and HitmanPro, scan the drive with those
get ESET Rogue Application Remover (ERAR)
Now, get Panda Ransomware Decrypt, then use ShadowExplorer to restore files encrypted by Cerber Ransomware.
Problem solved, now use your fucking brain. Only a completely fucked up beta newscrub would get ransomware. Are you some fucking 12yearoldfaggot who never had any anti-virus or any experience with computers?
now gtfo 4chan u 9gag reddit piece of shit
>>
>>692451671
Ted Cruz is the Cuban Hitler. This site is going down faster than a South Korean fairy or Malaysian airlines 370
>>
>>692445230
Ah, I remember the first time I got a virus in like 1996 and started backing everything up religiously.

I was 10.
>>
File: mfw.jpg (35 KB, 500x333) Image search: [Google]
mfw.jpg
35 KB, 500x333
>>692452446
>>
>>692452552
>MalwareBytes
I know the founder, he lives down the street. He's young like us.
>>
>>692446606
>decrypt 1 file for free (at top)
DO IT
>>
>>692446606
you can buy a new pc with that money. fuck this.
>>
>>692452723
wat
>>
>>692452479
He certainly likes to whine about open-source software a lot more often than he likes to get his hands dirty fixing it. The lazy cunt.
>>
>>692449370
stop pussyfooting around
>>
>>692445230
Wipe hard drive and reinstall OS.

I see this shit far too often at work (support guy) but wiping is the only sure way to make sure whatever caused the problem is completely gone.

And then tell your friend not to be a fuck nugget.
>>
>>692452741
read the thread. already tried. just gives a decryption error since i don't have any of op's encrypted files.
>>
>>692451671
What in Davy Jones' locker did ye just bark at me, ye scurvy bilgerat? I'll have ye know I be the meanest cutthroat on the seven seas, and I've led numerous raids on fishing villages, and raped over 300 wenches. I be trained in hit-and-run pillaging and be the deadliest with a pistol of all the captains on the high seas. Ye be nothing to me but another source o' swag. I'll have yer guts for garters and keel haul ye like never been done before, hear me true. You think ye can hide behind your newfangled computing device? Think twice on that, scallywag. As we parley I be contacting my secret network o' pirates across the sea and yer port is being tracked right now so ye better prepare for the typhoon, weevil. The kind o' monsoon that'll wipe ye off the map. You're sharkbait, fool. I can sail anywhere, in any waters, and can kill ye in o'er seven hundred ways, and that be just with me hook and fist. Not only do I be top o' the line with a cutlass, but I have an entire pirate fleet at my beck and call and I'll damned sure use it all to wipe yer arse off o' the world, ye dog. If only ye had had the foresight to know what devilish wrath your jibe was about to incur, ye might have belayed the comment. But ye couldn't, ye didn't, and now ye'll pay the ultimate toll, you buffoon. I'll shit fury all over ye and ye'll drown in the depths o' it. You're fish food now, lad.
>>
File: 5835.png (150 KB, 896x721) Image search: [Google]
5835.png
150 KB, 896x721
PLEASE STOP SWEARING. AFTER NEXT SWEARING YOU WILL BE BANNED
>>
>>692452934
#LeWellMeme'd
>>
>>692452597
what do you suggest for cloud backup? I looked at a few options, installed something, started the upload but my upload is so slow that backing up 400gb of data was going to take like 4 months.
>>
>>692453142
What the fuck did you just fucking say about me, you little bitch? I’ll have you know I graduated top of my class in the Navy Seals, and I’ve been involved in numerous secret raids on Al-Quaeda, and I have over 300 confirmed kills. I am trained in gorilla warfare and I’m the top sniper in the entire US armed forces. You are nothing to me but just another target. I will wipe you the fuck out with precision the likes of which has never been seen before on this Earth, mark my fucking words. You think you can get away with saying that shit to me over the Internet? Think again, fucker. As we speak I am contacting my secret network of spies across the USA and your IP is being traced right now so you better prepare for the storm, maggot. The storm that wipes out the pathetic little thing you call your life. You’re fucking dead, kid. I can be anywhere, anytime, and I can kill you in over seven hundred ways, and that’s just with my bare hands. Not only am I extensively trained in unarmed combat, but I have access to the entire arsenal of the United States Marine Corps and I will use it to its full extent to wipe your miserable ass off the face of the continent, you little shit. If only you could have known what unholy retribution your little “clever” comment was about to bring down upon you, maybe you would have held your fucking tongue. But you couldn’t, you didn’t, and now you’re paying the price, you goddamn idiot. I will shit fury all over you and you will drown in it. You’re fucking dead, kiddo.
>>
File: 5836.png (157 KB, 905x728) Image search: [Google]
5836.png
157 KB, 905x728
>>692453142
>>
>>692453142
Respond with --> One day while Andy was masturbating, Woody got wood. He could no longer help himself! He watched as Andy stroked his juicy kawaii cock. He approached Andy which startled him and make him pee everywhere on the floor and on Woody too. Being drenched in his urine made him harder than ever! Woody: "Andy Senpai! I'm alive and I want to be INSIDE OF YOU." Andy: "Oh Woody Chan! I always knew you were alive! I want to stuff you up my kawaii ass!" Woody grabbed a bunch of flavored live and rubbed it all over is head Woody: "Oh my! It's cherry flavored lube! Cherry is my favorite! Woody then stuffed his head up into Andy's tight ass! The other toys around the room watched intently as Woody shoved his head back and forth into Andy's nice ass, continuously making a squishy wet noise. The other toys also became aroused and they all gathered around Woody and Andy and started to urinate all over them, and then they started to masturbate. Andy: "Oh my goodness, Woody Chan! You are churning my insides up so well! Your nose is stimulating my prostate! OH YES! All the other toys became so aroused by this, that they could not help themselves anymore! They pushed Woody completely inside, and they all went inside. All of them wanted to be inside Andy's nice round ass. Andy: "No wait guys! My ass cannot hold this much! I'm getting so full! All the toys went inside of poor squirming Andy and pretty much, he was beyond full, and died from having his insides completely damaged. The mother came inside and found Andy, dead with a huge ass hemorrhage on his anus, with a HUGE belly full of toys.
>>
>>692445230
The same shit happened to me about a year ago. It didn't really matter because it was mostly photos that I could get back from 10 minutes here.

What really pissed me off though was my rom collections, which are mostly zipped
>>
>>692446046
vm wont save your ass. some shit detects vms and bypass them.
>>
File: 5837.png (206 KB, 903x812) Image search: [Google]
5837.png
206 KB, 903x812
>>692453333
they're probably russian and wont get the reference but ok
>>
>>692453333
Epic quads
>>
>>692453322
Sorry, that was my sister, I won't swear anymore, give me the key motherfuckers.
>>
>>692453333
Haha, that was truly the funniest thing I have read all day, Anon. You are a master of your art, I mean it! I'm not even joking right now, as many might expect me to be. I genuinely believe that you have great talent in what you do. It was hilarious and I thank you for it.
>>
>>692451365
kek
>>
>>692450184
only the beginning. would be trivial to spam them.
>>
>>692453521
any response?
>>
>>692454071
nope, still waiting.

im giving it until 10 after, then i have to go to work.
>>
File: 1454038518317.jpg (47 KB, 500x446) Image search: [Google]
1454038518317.jpg
47 KB, 500x446
>>692453521
The support is likely automated, and they probably expect responses such as "am not able 2 pay pls help". But I am still rather intrigued. Continue anon
>>
>>692450184
do it, post results
>>
>>692454157
what are you working with anon?
>>
>>692454318
programmer at a medium sized software company. it's pretty comfy.
>>
>>692454318
ur mums pussy
>>
I need an archive of this fucking thread
>>
File: 1466380379823.jpg (57 KB, 600x623) Image search: [Google]
1466380379823.jpg
57 KB, 600x623
>>692454566
Why? It's fucking garbage. You have an extremely shit standard for entertainment.
>>
>>692446019
din farsa heter fabian
>>
File: 5838.png (227 KB, 892x790) Image search: [Google]
5838.png
227 KB, 892x790
>>692454566
just archive it yourself.

time for me to go. was fun. bye bye faggots
>>
>>692454664
Its better than the rest of the autism that makes up /b/.
>>
>>692453142
Please stop swearing wtf are these "Mormon hackers"?
>>
>>692454802
youve served us well anon
>>
>>692454805
I guess you have a point. Too bad it isn't even good OC.
>>
File: image.jpg (202 KB, 750x1334) Image search: [Google]
image.jpg
202 KB, 750x1334
OP here again, thx for all the ideas so far will look into it. Might have found the resulution now. Btw the owner is a arab resturant owner with all his tax information and such.
>>
File: 1466779069767.png (270 KB, 580x519) Image search: [Google]
1466779069767.png
270 KB, 580x519
>>692455694
>Hard Reset
Holy kek my fucking sides.
>>
File: well-played.jpg (20 KB, 310x206) Image search: [Google]
well-played.jpg
20 KB, 310x206
>>692453322
>>
>>692455694
unplug the HDD, slave it to another PC in read only and hammer the fuck out of it with every kind of anti malware you can.

Worked for me when one of my retarded family members got some of this shit on their laptop.
>>
>>692451963
None.
The fingers prodding your brown eye don't count.
>>
>>692455694
Honestly... try to find and kill the startup entries that may be loading at bootup to check and make sure encryption happens, then revert the registry hives (if there are any) and you should be good to go.
>>
>>692456285
No it didn't, why would you lie ?
>>
>>692456426
Oh wait, I mean, delete system 32. that should fix it.

Better?
>>
File: i rike.gif (2 MB, 219x186) Image search: [Google]
i rike.gif
2 MB, 219x186
>>692448819
>>
>>692456562
Why would you do that??
>>
File: 1462654078031.jpg (87 KB, 398x500) Image search: [Google]
1462654078031.jpg
87 KB, 398x500
>>692455694
thank you OP, I had a lot of fun
>>
File: Screenshot_1.png (52 KB, 1253x729) Image search: [Google]
Screenshot_1.png
52 KB, 1253x729
>>692455694
Sorry for ruining your chances even more.
>>
>>692446606
looks like good info on bitcoin though... may give some of those sites a look
>>
>>692456940
You did well, stay safe out there on the interwebz /b/rother
>>
>>692446606
Well shit on my dick, bless you anon for delivering glorious webm
>>692445230
Just buy a new computer
>>
>>692446989
and how does that protect you when you are being encrypted?
>>
File: image.jpg (232 KB, 750x1334) Image search: [Google]
image.jpg
232 KB, 750x1334
>>692456940
Thanks it was a nice try. Looks like this goat fucker got some more virus 29 atm but malwarebytes usally dosent do shit. Ive tried photorec too recover files before but then you have like one millon files too sort out afterwards. Anons does it. Will fix iphone meanwhile
Thread replies: 255
Thread images: 49

banner
banner
[Boards: 3 / a / aco / adv / an / asp / b / biz / c / cgl / ck / cm / co / d / diy / e / fa / fit / g / gd / gif / h / hc / his / hm / hr / i / ic / int / jp / k / lgbt / lit / m / mlp / mu / n / news / o / out / p / po / pol / qa / r / r9k / s / s4s / sci / soc / sp / t / tg / toy / trash / trv / tv / u / v / vg / vp / vr / w / wg / wsg / wsr / x / y] [Home]

All trademarks and copyrights on this page are owned by their respective parties. Images uploaded are the responsibility of the Poster. Comments are owned by the Poster.
If a post contains personal/copyrighted/illegal content you can contact me at [email protected] with that post and thread number and it will be removed as soon as possible.
DMCA Content Takedown via dmca.com
All images are hosted on imgur.com, send takedown notices to them.
This is a 4chan archive - all of the content originated from them. If you need IP information for a Poster - you need to contact them. This website shows only archived content.