Attention!!!! All your personal files were encrypted with a strong algorythm RSA-1024 …

.. and you can’t get an access to them without making of what we need!

Read ‘How to decrypt’ txt-file on your desktop for details

Just do it as fast as you can!

Remember: Don’t try to tell someone about this message if you want to get your files back! Just do all we told.

*Eeek*  If your computer’s desktop has suddenly turned very pale and is displaying the above message, I hope you have a good backup*.

Computer Troubleshooters franchisees started to see reports of this from November 25, 2010.  The virus ‘Trojan.Ransom-U’ is ransomware – it hijacks your files and renders them unreadable, threatening to delete them completely unless you wire transfer $120 and email datafinder@fastmail.fm  The ransom note is contained in the How to decrypt files.txt file on your desktop.

Your virus scanning software may detect a strangley named executable file (.exe), where the name is a random string of  numbers and/or letters. 

At the time of writing (Nov 29 2010 AEST), there is no known way to clean or un-encrypt your files.  The only recovery steps are to turn off Windows System Restore, scan and clean your computer in safe mode and restore your files from your last known-working backup. 

If you are fortunate enough to be reading this BEFORE your own PC has become a victim, follow the advice from Lloyd Borrett for AVG to secure your Adobe Acrobat PDF Reader software, with a few changes to its settings: https://ctaspley.wordpress.com/2010/08/24/protect-your-pc-against-adobe-pdf-reader-security-flaws/

Oh, and make sure your backup is working 🙂

*  For single PCs, we recommend Carbonite Online Backup

Advertisements