Solved

TorrentLocker

Posted on 2014-11-26
2
530 Views
Last Modified: 2014-11-26
We have a client with a Windows 7 PC with the TorrentLocker Ransomware infection.
It claims its Cryptolocker but isn't.

Re http://www.bleepingcomputer.com/forums/t/547708/torrentlocker-ransomware-cracked-and-decrypter-has-been-made/

They have no backups whatsoever so even if the TorrentUnlocker program still decrypted the files they couldn't use it.

Is there anything they can do right now without paying? We don't want to make it worse by trying to remove with malware software.
0
Comment
Question by:Ace-IT
2 Comments
 
LVL 10

Accepted Solution

by:
10023 earned 500 total points
ID: 40468345
You said:  "They have no backups whatsoever so even if the TorrentUnlocker program still decrypted the files they couldn't use it."

Are you referring to shadow copies:  if not...here is long article...claims sometimes it is not successful in deleting shadow copies...ctrl-F to find the part about system restore
http://www.bleepingcomputer.com/virus-removal/cryptolocker-ransomware-information#shadow
0
 
LVL 1

Author Comment

by:Ace-IT
ID: 40468421
Thanks. The Shadow Copiers are all there from this morning.
One thing I didn't think about.
Cheers.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
suspending the anti virus 6 105
cryptolocker in a desktop 3 65
where is software market online? 7 63
Anti-virus for Linux Server 15 87
As a financial services provider, your business is impacted by two of the strictest federal regulations on record: the Sarbanes-Oxley Act and the Gramm-Leach-Bliley Act. Correctly implementing faxing into your organization to provide secure, real-ti…
Envision that you are chipping away at another e-business site with a team of pundit developers and designers. Everything seems, by all accounts, to be going easily.
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …
This tutorial demonstrates a quick way of adding group price to multiple Magento products.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now