Reply to thread

Message: <blockquote data-quote="Kevin_Fdo" data-source="post: 25187947" data-attributes="member: 570000">There is no longer an easy method to get OFFLINE KEYS for many of these newer variants and no way to decrypt files if infected with an ONLINE KEY without paying the ransom and obtaining the private keys from the criminals who created the ransomware. Emsisoft can only get OFFLINE KEYS AFTER a victim has PAID the ransom, receives a key and provides it to them. This means if infected with an ONLINE KEY, we cannot help you decrypt files since there is no way to gain access to the criminal's command server and retrieve this KEY.<a href="https://www.bleepingcomputer.com/forums/t/714143/requesting-help-ransomware-nppp/" target="_blank">https://www.bleepingcomputer.com/forums/t/714143/requesting-help-ransomware-nppp/</a>The quickest way to check if you were infected with an OFFLINE or ONLINE KEY is to:<ul> <li data-xf-list-type="ul">Find the PesonalID.txt file located in the folder C:\ SystemID\ on the infected machine and check to see if there is only one or multiple IDs. </li> <li data-xf-list-type="ul">If the ID ends with "t1" (not "1t") there is a chance that some or your files were encrypted by the OFFLINE KEY and are recoverable. </li> <li data-xf-list-type="ul">If none of the ID's listed ends with "t1" then all of your files were most likely encrypted with an ONLINE KEY and are not recoverable at this time.</li> </ul><a href="https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/page-512#entry4873721" target="_blank">https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/page-512#entry4873721</a></blockquote>

Verification: Hata thunen beduwama keeyada? (60 bedeema thuna)

Top Bottom