Although ransomware is not a new scourge in the computer world, a new variation has recently surfaced. The old ransomware would lock you out of your computer until you paid the hijacker a fee to unlock your system. This new variant encrypts your data files. You need a "Key" to un-encrypt the files.
The Malware team at Major Geeks has just started to deal with this and as yet have not found a solution to the issues. The hijacker wants the victim to contact him at Koeserg@gmail.com. Anyone who falls victim to this hijacker should contact the FBI's cybercrimes division and report the extortion.
This is another example of the sort of computer issues that remind us to always back up your data. A better idea would be to use a freeware program such as Acronis True Image to backup your entire hard drive.
Check back for further updates regarding this new infection.
Update:
The MajorGeeks malware team has found a possible fix for this ransomware. If you are infected with this new strain, download and run:
http://majorgeeks.com/Dr._Web_Trojan.Encoder.94_Decryptor_d7716.html
You must run it with "-k 85" as a parameter (without the quotes).
Example:
Put te94decrypt.exe in C:\
From run (windows+R) type and hit enter:
C:\te94decrypt.exe -k 85
If te94decrypt with key 85 (-k 85) does not work, I suggest sending a couple of the encrypted files to https://vms.drweb.com/sendvirus/
New Ransomware has surfaced (Update)
The Malware team at Major Geeks has just started to deal with this and as yet have not found a solution to the issues. The hijacker wants the victim to contact him at Koeserg@gmail.com. Anyone who falls victim to this hijacker should contact the FBI's cybercrimes division and report the extortion.
This is another example of the sort of computer issues that remind us to always back up your data. A better idea would be to use a freeware program such as Acronis True Image to backup your entire hard drive.
Check back for further updates regarding this new infection.
Update:
The MajorGeeks malware team has found a possible fix for this ransomware. If you are infected with this new strain, download and run:
http://majorgeeks.com/Dr._Web_Trojan.Encoder.94_Decryptor_d7716.html
You must run it with "-k 85" as a parameter (without the quotes).
Example:
Put te94decrypt.exe in C:\
From run (windows+R) type and hit enter:
C:\te94decrypt.exe -k 85
If te94decrypt with key 85 (-k 85) does not work, I suggest sending a couple of the encrypted files to https://vms.drweb.com/sendvirus/
New Ransomware has surfaced (Update)
