How to deal with Cryptorbit ransomware?

Forums › Desktop computing › How to deal with Cryptorbit ransomware?

anonymousey

5 posts

Wannabe Geek

#139356 6-Feb-2014 11:12

First time post from a newbie

Approximately a week ago my desktop on Win7 was encrypted with this awful Cryptolocker or Cryptorbit ransom malware :(
There is NO RANSOM demand and was just a link to a foreign website which I did not enter because as far as I can tell - any keymoney payments would just be another toxic doorway for additional cyberattacking etc

I have been hunting online for help and found a US site which discusses the version with near identical gif showing a money demand dated 28 December 2013 ... BUT sadly my emails to Nate to alert him were undeliverable

At the moment I have not done a reformat with any backedup programmes mainly as youngster would have uploaded xmas family photos & videos so I am trying to do as much as I can before scrubbing these encrypted files etc

I have tried to upload only the gif in case this is helpful to others to see what version I am referencing etc

gzt

18679 posts

Uber Geek
+1 received by user: 7816

Lifetime subscriber

#981136 6-Feb-2014 11:41

CryptorBit is not the same as Cryptolocker.

Cryptolocker has an excellent reputation for decrypting/unlocking files when the ransom is paid.

Going by reports on the web, CryptorBit does not decrypt/unlock files at all - it just takes your money. But maybe wait for a first hand report before completely ruling out payment as an option.

New drives are cheap as. Personally I would take the old drive out and put it away, awaiting new advances in encryption breaking techniques. They do come along from time to time.

You might consider taking your machine to a professional. There is always a small possibility the actual encryption process did not work properly or did not encrypt 100% of all files you want to get back. A lot of malware is badly written and unreliable in committing it's evil mission.

nedkelly

666 posts

Ultimate Geek
+1 received by user: 104

Trusted

Subscriber

#981137 6-Feb-2014 11:42

I hate to say it but they are smart forcing you to use an onion website.
I wish you the best of luck trying to recover the files.

johnr

19282 posts

Uber Geek
+1 received by user: 2526
Inactive user

#981147 6-Feb-2014 11:58

And people this is why you have backups of important files

anonymousey

5 posts

Wannabe Geek

#981148 6-Feb-2014 12:01

Thank you for your replies :)

Think I have been exhausted searching online and doing all these scanner programmes recommended by authorities that I had become tunneleyed focussed on trying to understand this horrible malware [& explain to young person here] that yep I just never thought of buying another hardrive to get me going again properly :(

Its destroyed 2 drives I had installed here with 400 gig all up nearly ..so I will see if I can find a local friendly who helps pensioners understand how they take out the damaged hardware :) Hopefully then I can at least get back to working a little bit with some material stashed away on my backup :)