This is the fix for one that my mom downloaded, and has a bit of info on the infection:
http://www.bleepingcomputer.com/news/security/decryptor-released-for-the-nemucod-trojans-crypted-ransomware/ On Friday, September 30, 2016, Ken Hohhof <[email protected]> wrote: > FireEye was providing a decrypt tool for the original Cryptolocker but > likely you are out of luck. Find a backup, pay the ransom, or kiss your > data goodbye. > > > > *From:* Af [mailto:[email protected] > <javascript:_e(%7B%7D,'cvml','[email protected]');>] *On Behalf Of *Jason > McKemie > *Sent:* Friday, September 30, 2016 1:26 AM > *To:* [email protected] <javascript:_e(%7B%7D,'cvml','[email protected]');> > *Subject:* Re: [AFMUG] OT: Ransomware > > > > Depends on the ransomware. I found a decryption tool for my mom's > computer when she managed to get it infected - depends on the particular > flavor I'm sure. I think this one had .crypt or .crypted extensions on all > the files. I did need an copy of one of the encrypted files prior to the > infection for the program to do its job though. > > > > On Fri, Sep 30, 2016 at 12:14 AM, Travis Johnson <[email protected] > <javascript:_e(%7B%7D,'cvml','[email protected]');>> wrote: > > Hi, > > One of our office computers was just infected with "ransomware". It has > encrypted all the files on that computer, plus many files on a server that > computer was connected to. > > Any ideas or suggestions on the best way to try and fix/remove this crap > and unencrypt all the files? > > Travis > > >
