Tesla Crypt 3.0

[REDACTED]

Last week my PC was infected by the well known TeslaCrypt-Trojan - but with version 3, which checks all volumes on my PC for ".jpg" and all Windows-Office 365-files, encrypting these files and adding an ".mircro"-ending. In my case for example a data-SSD with about 10.000 pictures in JPEG and RAW-Format was encrypted, so the files no longer can be used.

The "funny" thing about this: this infection occured even the total AVAST-Suite was installed and full operational.......

Therefore: is AVAST working on a decrypt-software to make encrypted files usable again?

Anyway: even NORTON and AVG did not mention anything to solve the problem with TeslaCrypt-Trojan-destroyed files.......

[Pondus]

The "funny" thing about this: this infection occured even the total AVAST-Suite was installed and full operational.......

NO security program have 100% detection or zero false positives

The malware world is not static, malware writers constantly change or create new versions to avoid detection



Best solution is BACKUP, BACKUP, BACKUP     

[Pondus]

We can help you remove the malware here .... but your files are gone   


Follow instructions here and you get assistanse >> https://forum.avast.com/index.php?topic=53253.0

[REDACTED]

What is the extension of your encrypted files?

[REDACTED]

What is the extension of your encrypted files?

Have a closer look to my posting and you will find the answer.

[REDACTED]

My personal problem with the about 10.000 corrupted files is solved: what I forgot was the fact, I made two backups in the nearer past, one on my NAS (Fritz!Box), one on a blue-ray-disk. So most of my pictures are saved well.

But the bad thing is: the TeslaCrypt-3.0 does NOT change it's appearance to hide and unfortuneately the AVAST-Suite failed to protect my PC from beeing infected.

Therefore the AVAST-producers should care for a decrypting-tool of this special encrypted files.

[Eddy]

avast is currently working on a detection tool for it.

[Pondus]

still waiting for the requested logs if you want help removing it