All your files like photos, databases, documents a - Posted (1447 Views)
Junior Member
AHMEDHHH1
Posts: 105
105
sf2k_v34_07 all files *.asp.moresa
all files code encrypted
_readme.txt
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key. ATTENTION! Don't worry my friend, you can return all your files! All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key. The only method of recovering files is to purchase decrypt tool and unique key for you. This software will decrypt all your encrypted files. What guarantees you have? You can send one of your encrypted file from your PC and we decrypt it for free. But we can decrypt only 1 file for free. File must not contain valuable information. You can get and look video overview decrypt tool:
https://xx
Price of private key and decrypt software is $980. Discount 50% available if you contact us first 72 hours, that's price for you is $490. Please note that you'll never restore your data without payment. Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours. To get this software you need write on our e-mail:
xxxx@xxxx.cc
Reserve e-mail address to contact us:
xxx@xxxx.com
Support Telegram account:
@datarestore
Your personal ID:
069OspdywaduiShdktrechFrBvprhzhyA4MZeKtIUBuDu4hp9jAUeTYOCqNrv
 Sort direction, for dates DESC means newest first  
 Page size 
Posted
Forum Admin
HuwR
Posts: 20611
20611
Sorry to see your server has been hacked, I suggest you google to see if there is a tool to decrypt everything. There are several about, but you will need a copy of one of the encrypted files before it was encrypted, the tools then work out the encryption algorithm and allow you to decrypt your files.
Posted
Forum Admin
HuwR
Posts: 20611
20611
https://www.pcrisk.com/removal-guides/14905-moresa-ransomware
Posted
Junior Member
AHMEDHHH1
Posts: 105
105
thanks for the help
Failed to restore files with old date
Do you know what encryption language is used
Eg md5 or rc4?
Posted
Forum Admin
HuwR
Posts: 20611
20611
check here, it is supposedly a variant of STOP

https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-support-topic/
Posted
Junior Member
AHMEDHHH1
Posts: 105
105
check here, it is supposedly a variant of STOP
https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-support-topic/Originally posted by HuwR

I did not find the right key
Thank you there are 3 files asp i need them will re - work them again
I'm sorry you bothered me professor HuwR
Posted
Forum Admin
HuwR
Posts: 20611
20611
sorry it didn't help sad I know how you feel one of my servers was encrypted a while back but I did at least manage to decrypt all me files.
Posted
Junior Member
AHMEDHHH1
Posts: 105
105
sorry it didn't help sad I know how you feel one of my servers was encrypted a while back but I did at least manage to decrypt all me files.Originally posted by HuwR

How did you do that
Posted
Forum Admin
HuwR
Posts: 20611
20611
I found a tool online that was able to crack the key used to encrypt my server. I had to provide two versions of the same file, one that was encrypted, plus a copy of the same file that was not encrypted, it was than able to brute force the key (took about 4 hours) Armed with the key it was then able to decrypt my entire machine (took > 12hrs)

Posted
Junior Member
AHMEDHHH1
Posts: 105
105
I found a tool online that was able to crack the key used to encrypt my server. I had to provide two versions of the same file, one that was encrypted, plus a copy of the same file that was not encrypted, it was than able to brute force the key (took about 4 hours) Armed with the key it was then able to decrypt my entire machine (took > 12hrs)
Originally posted by HuwR

Well done
I also have encrypted files and other unencrypted files
https://drive.google.com/open?id=1_eclATh3WsB0taoXAYIr0O_AsBpIK_E-
https://drive.google.com/open?id=1RBpHOxjNThImkxgi_IYZmI9t6bP7CkmY
Possible name of the key breaking tool used to encrypt the server
 
You Must enter a message