NEED HELP unlocking your digital life without paying your attackers*?: https://www.nomoreransom.org/ Kelvin *www.jayanoris.com <http://www.jayanoris.com>*
Hello skunks Woke up with a thor virus on one of my pcs all my data is encrypted Anyone with an idea of how to get my data back? Kind regards George On Oct 31, 2016 10:23 AM, "Kelvin via skunkworks" <skunkworks@lists.my.co.ke> wrote:
NEED HELP unlocking your digital life without paying your attackers*?:
Kelvin *www.jayanoris.com <http://www.jayanoris.com>*
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
Save yourself the energy and nuke the infected drives. Thor is a new version of Locky and there are no decryption tools in the public domain. -------- Original Message -------- Subject: Re: [Skunkworks] No More Ransomware Local Time: November 5, 2016 10:08 AM UTC Time: November 5, 2016 7:08 AM From: skunkworks@lists.my.co.ke To: Skunkworks Mailing List <skunkworks@lists.my.co.ke>, Kelvin <kjayanoris@gmail.com> Hello skunks Woke up with a thor virus on one of my pcs all my data is encrypted Anyone with an idea of how to get my data back?
Ooh no nooh am damn f****d On Nov 5, 2016 10:32 AM, "Marcus Cicero via skunkworks" < skunkworks@lists.my.co.ke> wrote:
Save yourself the energy and nuke the infected drives.
Thor is a new version of Locky and there are no decryption tools in the public domain.
-------- Original Message -------- Subject: Re: [Skunkworks] No More Ransomware Local Time: November 5, 2016 10:08 AM UTC Time: November 5, 2016 7:08 AM From: skunkworks@lists.my.co.ke To: Skunkworks Mailing List <skunkworks@lists.my.co.ke>, Kelvin < kjayanoris@gmail.com>
Hello skunks
Woke up with a thor virus on one of my pcs all my data is encrypted Anyone with an idea of how to get my data back?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
At least you have backups to rely on. On 5 November 2016 at 11:25, George Derry via skunkworks < skunkworks@lists.my.co.ke> wrote:
Ooh no nooh am damn f****d
On Nov 5, 2016 10:32 AM, "Marcus Cicero via skunkworks" < skunkworks@lists.my.co.ke> wrote:
Save yourself the energy and nuke the infected drives.
Thor is a new version of Locky and there are no decryption tools in the public domain.
-------- Original Message -------- Subject: Re: [Skunkworks] No More Ransomware Local Time: November 5, 2016 10:08 AM UTC Time: November 5, 2016 7:08 AM From: skunkworks@lists.my.co.ke To: Skunkworks Mailing List <skunkworks@lists.my.co.ke>, Kelvin < kjayanoris@gmail.com>
Hello skunks
Woke up with a thor virus on one of my pcs all my data is encrypted Anyone with an idea of how to get my data back?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
@ Washi sadly no, even after advising them to backup, only to discover the same user wasn't backing up... maybe waiting for the I.T guy to do it... On Nov 5, 2016 11:34 AM, "Odhiambo Washington via skunkworks" < skunkworks@lists.my.co.ke> wrote:
At least you have backups to rely on.
On 5 November 2016 at 11:25, George Derry via skunkworks < skunkworks@lists.my.co.ke> wrote:
Ooh no nooh am damn f****d
On Nov 5, 2016 10:32 AM, "Marcus Cicero via skunkworks" < skunkworks@lists.my.co.ke> wrote:
Save yourself the energy and nuke the infected drives.
Thor is a new version of Locky and there are no decryption tools in the public domain.
-------- Original Message -------- Subject: Re: [Skunkworks] No More Ransomware Local Time: November 5, 2016 10:08 AM UTC Time: November 5, 2016 7:08 AM From: skunkworks@lists.my.co.ke To: Skunkworks Mailing List <skunkworks@lists.my.co.ke>, Kelvin < kjayanoris@gmail.com>
Hello skunks
Woke up with a thor virus on one of my pcs all my data is encrypted Anyone with an idea of how to get my data back?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
In that case, if I were you, and I had put all the necessary backup policy and utils in place, I wouldn't worry. However, it looks you still hadn't! You could have at least configured a scheduled task to do backup if they don't. Here is something that might help you in the future: 1. Have a NAS in place for storing backups (and have this NAS store backed up too!) 2. Use a little batch file for doing backup 3. This batch file/script should be written such that it maps the NAS for backup, does backup, then disconnects the mapped drive. 4. Configure the batch file to be run via the task scheduler (TS). If it fails to run because the computer was off at the scheduled time, it should run immediately the computer is turned on. It's an option in the TS. 5. The batch file should create dated compressed backups, i.e.Derry-YYYY-MM-DD-HHMM.zip [I like this for seeing the sizes and last date that I can use for restore in case shit happens. 6. Put a link to this batch file on the desktop and tell the use that it is their "Life Preserver" which they must ensure they run at least every day! 7. Take (literally) a bucket of water and wash your hands in front of them, disclaiming that you will no longer take responsibility for their failure to run the batch file <LOL> On 5 November 2016 at 11:44, George Derry <gderry15@gmail.com> wrote:
@ Washi sadly no, even after advising them to backup, only to discover the same user wasn't backing up... maybe waiting for the I.T guy to do it...
On Nov 5, 2016 11:34 AM, "Odhiambo Washington via skunkworks" < skunkworks@lists.my.co.ke> wrote:
At least you have backups to rely on.
On 5 November 2016 at 11:25, George Derry via skunkworks < skunkworks@lists.my.co.ke> wrote:
Ooh no nooh am damn f****d
On Nov 5, 2016 10:32 AM, "Marcus Cicero via skunkworks" < skunkworks@lists.my.co.ke> wrote:
Save yourself the energy and nuke the infected drives.
Thor is a new version of Locky and there are no decryption tools in the public domain.
-------- Original Message -------- Subject: Re: [Skunkworks] No More Ransomware Local Time: November 5, 2016 10:08 AM UTC Time: November 5, 2016 7:08 AM From: skunkworks@lists.my.co.ke To: Skunkworks Mailing List <skunkworks@lists.my.co.ke>, Kelvin < kjayanoris@gmail.com>
Hello skunks
Woke up with a thor virus on one of my pcs all my data is encrypted Anyone with an idea of how to get my data back?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
Having been beaten once, you can talk to me. I will do an initial assessment to see whether you will be helped. I defeated the ransom seeker and in the process I discovered a lot. The earlier you work on your files, the better before they do multiple encryption on your files making it extremely difficult to be helped. Kind Regards Peter - 0721586109 On Sat, Nov 5, 2016 at 11:56 AM, Odhiambo Washington via skunkworks < skunkworks@lists.my.co.ke> wrote:
In that case, if I were you, and I had put all the necessary backup policy and utils in place, I wouldn't worry. However, it looks you still hadn't! You could have at least configured a scheduled task to do backup if they don't. Here is something that might help you in the future:
1. Have a NAS in place for storing backups (and have this NAS store backed up too!) 2. Use a little batch file for doing backup 3. This batch file/script should be written such that it maps the NAS for backup, does backup, then disconnects the mapped drive. 4. Configure the batch file to be run via the task scheduler (TS). If it fails to run because the computer was off at the scheduled time, it should run immediately the computer is turned on. It's an option in the TS. 5. The batch file should create dated compressed backups, i.e.Derry-YYYY-MM-DD-HHMM.zip [I like this for seeing the sizes and last date that I can use for restore in case shit happens. 6. Put a link to this batch file on the desktop and tell the use that it is their "Life Preserver" which they must ensure they run at least every day! 7. Take (literally) a bucket of water and wash your hands in front of them, disclaiming that you will no longer take responsibility for their failure to run the batch file <LOL>
On 5 November 2016 at 11:44, George Derry <gderry15@gmail.com> wrote:
@ Washi sadly no, even after advising them to backup, only to discover the same user wasn't backing up... maybe waiting for the I.T guy to do it...
On Nov 5, 2016 11:34 AM, "Odhiambo Washington via skunkworks" < skunkworks@lists.my.co.ke> wrote:
At least you have backups to rely on.
On 5 November 2016 at 11:25, George Derry via skunkworks < skunkworks@lists.my.co.ke> wrote:
Ooh no nooh am damn f****d
On Nov 5, 2016 10:32 AM, "Marcus Cicero via skunkworks" < skunkworks@lists.my.co.ke> wrote:
Save yourself the energy and nuke the infected drives.
Thor is a new version of Locky and there are no decryption tools in the public domain.
-------- Original Message -------- Subject: Re: [Skunkworks] No More Ransomware Local Time: November 5, 2016 10:08 AM UTC Time: November 5, 2016 7:08 AM From: skunkworks@lists.my.co.ke To: Skunkworks Mailing List <skunkworks@lists.my.co.ke>, Kelvin < kjayanoris@gmail.com>
Hello skunks
Woke up with a thor virus on one of my pcs all my data is encrypted Anyone with an idea of how to get my data back?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- ---------- Don't wait for success; hunt it down like there's no tomorrow.
It is not possible to decrypt the Locky Ransomware Thor Variant Unfortunately, there is still no realistic way to decrypt the Locky Ransomware regardless of the extension. Guess it's time to count my loses n move on.. On Nov 5, 2016 5:43 PM, "Peter Osotsi via skunkworks" < skunkworks@lists.my.co.ke> wrote:
Having been beaten once, you can talk to me. I will do an initial assessment to see whether you will be helped. I defeated the ransom seeker and in the process I discovered a lot. The earlier you work on your files, the better before they do multiple encryption on your files making it extremely difficult to be helped.
Kind Regards Peter - 0721586109
On Sat, Nov 5, 2016 at 11:56 AM, Odhiambo Washington via skunkworks < skunkworks@lists.my.co.ke> wrote:
In that case, if I were you, and I had put all the necessary backup policy and utils in place, I wouldn't worry. However, it looks you still hadn't! You could have at least configured a scheduled task to do backup if they don't. Here is something that might help you in the future:
1. Have a NAS in place for storing backups (and have this NAS store backed up too!) 2. Use a little batch file for doing backup 3. This batch file/script should be written such that it maps the NAS for backup, does backup, then disconnects the mapped drive. 4. Configure the batch file to be run via the task scheduler (TS). If it fails to run because the computer was off at the scheduled time, it should run immediately the computer is turned on. It's an option in the TS. 5. The batch file should create dated compressed backups, i.e.Derry-YYYY-MM-DD-HHMM.zip [I like this for seeing the sizes and last date that I can use for restore in case shit happens. 6. Put a link to this batch file on the desktop and tell the use that it is their "Life Preserver" which they must ensure they run at least every day! 7. Take (literally) a bucket of water and wash your hands in front of them, disclaiming that you will no longer take responsibility for their failure to run the batch file <LOL>
On 5 November 2016 at 11:44, George Derry <gderry15@gmail.com> wrote:
@ Washi sadly no, even after advising them to backup, only to discover the same user wasn't backing up... maybe waiting for the I.T guy to do it...
On Nov 5, 2016 11:34 AM, "Odhiambo Washington via skunkworks" < skunkworks@lists.my.co.ke> wrote:
At least you have backups to rely on.
On 5 November 2016 at 11:25, George Derry via skunkworks < skunkworks@lists.my.co.ke> wrote:
Ooh no nooh am damn f****d
On Nov 5, 2016 10:32 AM, "Marcus Cicero via skunkworks" < skunkworks@lists.my.co.ke> wrote:
Save yourself the energy and nuke the infected drives.
Thor is a new version of Locky and there are no decryption tools in the public domain.
-------- Original Message -------- Subject: Re: [Skunkworks] No More Ransomware Local Time: November 5, 2016 10:08 AM UTC Time: November 5, 2016 7:08 AM From: skunkworks@lists.my.co.ke To: Skunkworks Mailing List <skunkworks@lists.my.co.ke>, Kelvin < kjayanoris@gmail.com>
Hello skunks
Woke up with a thor virus on one of my pcs all my data is encrypted Anyone with an idea of how to get my data back?
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
-- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 "Oh, the cruft."
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
--
---------- Don't wait for success; hunt it down like there's no tomorrow.
_______________________________________________ skunkworks mailing list skunkworks@lists.my.co.ke ------------ List info, subscribe/unsubscribe http://lists.my.co.ke/cgi-bin/mailman/listinfo/skunkworks ------------
Skunkworks Rules http://my.co.ke/phpbb/viewtopic.php?f=24&t=94 ------------ Other services @ http://my.co.ke
participants (5)
-
George Derry -
Kelvin -
Marcus Cicero -
Odhiambo Washington -
Peter Osotsi