Hi,
Maybe a bit cynical, but thanks to Microsoft I have a new client
affected by ransomware. Didn't touch the hardware yet, but in worst case
all data is encrypted
The client told me, that it is Cryptolocker, which means, it is probably
Torrent Locker. I am not sure if the past decryption method still works:<
Uhhh, now i, not being a windows expert, can learn about MS Shadow
copies and fiddle again around with the so lovely registry :[
I'd prefer to earn money in IT business doing innovative creations based
on FOSS and not to help MS users getting back their oil,erm data.
I'm facing a similar problem, a Windows 7 Laptop with encrypted data. It
happened already almost a year ago, but now I have the need and some
time to fight the shit.
My stations so far:
http://blogs.cisco.com/security/talos/teslacrypt
https://github.com/Googulator/TeslaCrack
I would like to continue the discussion, get some hints and document the
progress.
Cheers,
ando