Author Topic: Help with trojan  (Read 2091 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Help with trojan
« on: May 05, 2017, 06:26:52 PM »
I have had my recent files hijacked by a Trojan- Onion.

Basically, buy our software to unlock the.
Avast does not recognise it.
Any help would be appreciated.

Files are named like this: current.txt.id_83163959_fgb45ft3pqamyji7.onion

This is the blackmail file:

*** ALL YOUR WORK AND PERSONAL FILES HAVE BEEN ENCRYPTED ***

To decrypt your files you need to buy the special software. To recover data, follow the instructions!
You can find out the details/ask questions in the chat:
file names deleted

You ID: 83163959

If the resource is not available for a long time, install and use the Tor-browser:
1. Run your Internet-browser
2. Enter or copy the address FILE NAME DELETEDl in the address bar of your browser and press key ENTER
3. On the site will be offered to download the Tor-browser, download and install it. Run.
4. Connect with the button "Connect" (if you use the English version)
5. After connection, the usual Tor-browser window will open
6. Enter or copy the address DELETED in the address bar of Tor-browser and press key ENTER
7. Wait for the site to load

If you have any problems installing or using, please visit the video tutorial DELETED
« Last Edit: May 05, 2017, 07:48:03 PM by boydarm »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31072
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Help with trojan
« Reply #1 on: May 05, 2017, 06:31:40 PM »
1]
That is not a Trojan but ransomware.

2]
Break the links in your post.

3]
look here > https://www.nomoreransom.org/
and
follow the instructions > https://forum.avast.com/index.php?topic=194892.0

« Last Edit: May 05, 2017, 06:33:59 PM by Eddy »

REDACTED

  • Guest
Re: Help with trojan
« Reply #2 on: May 05, 2017, 06:54:29 PM »
1) and 2), thanks.
2) no idea what you mean, sorry.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31072
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Help with trojan
« Reply #3 on: May 05, 2017, 06:55:37 PM »
Change the links so people can't click on them.

REDACTED

  • Guest
Re: Help with trojan
« Reply #4 on: May 05, 2017, 07:00:43 PM »
And how do I do that?

REDACTED

  • Guest
Re: Help with trojan
« Reply #5 on: May 05, 2017, 07:56:21 PM »
Removing them works, and Malwarebytes got it (I think) so no need for reference.

Pity Avast doesn't catch it, but on the other hand they did tell me how to get rid of it so even money. Lost a lot od data, but I didn't have to get out the shotgun (re-install Windows), so overall a plus.

Thanks for the help.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37699
Re: Help with trojan
« Reply #6 on: May 05, 2017, 08:07:16 PM »
Quote
1]
That is not a Trojan but ransomware.

To nitpic on that Eddy, most AV vendor will have trojan as part of the detection name since it usually arrive disguised as something else, like a fake mail attachment (the ransomware downloader)  and the payload file (the actual ransomware)

https://usa.kaspersky.com/resource-center/threats/onion-ransomware-virus-threat

« Last Edit: May 05, 2017, 08:14:13 PM by Pondus »