[Daddy‎‎‎‎‎‎‎‎‎‎‎‎]

So basically our server machine was infected and all the files are encrypted, backups are gone, everything is basically fucked at this point.
Since all the files are encrypted, they left three emails and I can't find shit anywhere else for them, they want 1 Bitcoin for all the files to be unlocked which I don't have a problem paying but whose to guarantee it will actually happen.


Is there anything I can possibly do at this point?

[Dеceived]

It all depends on what ransom ware it is as may have a public decryption tool

[Daddy‎‎‎‎‎‎‎‎‎‎‎‎]

It all depends on what ransom ware it is as may have a public decryption tool

https://hastebin.com/eyukunagip.rb

Encryption for one of the files.

[Dеceived]

https://hastebin.com/eyukunagip.rb

Encryption for one of the files.

does it say anywhere a name of ransomware?

[Daddy‎‎‎‎‎‎‎‎‎‎‎‎]

does it say anywhere a name of ransomware?

Nope, just all the files are encrypted with basically saying [email protected] 1.3.1.0.id-

[Dеceived]

Nope, just all the files are encrypted with basically saying [email protected] 1.3.1.0.id-

hmm tried various searches of the image the encryption and emails etc but cant find anything

[Daddy‎‎‎‎‎‎‎‎‎‎‎‎]

hmm tried various searches of the image the encryption and emails etc but cant find anything

Looks to be Cryakl Ransomware, tried a tool that Kaspersky has but it's like "Requires original file" Well no shit I wish I had that original file.

[Dеceived]

https://www.pcrisk.com/removal-guides/11...ransomware

this guide looks to be promising

[5chn4pp]

Looks to be Cryakl Ransomware, tried a tool that Kaspersky has but it's like "Requires original file" Well no shit I wish I had that original file.

I think it means you only need 1 or 2 original files, so after that it should figure out all other files.

[Daddy‎‎‎‎‎‎‎‎‎‎‎‎]

I think it means you only need 1 or 2 original files, so after that it should figure out all other files.

Yeah, I am working on it. Thanks for the help :)
I fucking hope I can get this shit back, then do an instant backup, format, update everything, be good to go.

[5chn4pp]

Yeah, I am working on it. Thanks for the help :)
I fucking hope I can get this shit back, then do an instant backup, format, update everything, be good to go.

How did you get infected? Do you have the original file?

This might help to ID your ransomware:

https://id-ransomware.malwarehunterteam.com/

[xatt]

Fucking rats man, people who do shit like that should be punished to the fullest extent of law.

[Aigrod]

If you were running Ubuntu it might have been this:
http://news.softpedia.com/news/sudo-vuln...6150.shtml
So update as soon as possible. And make a backup.

[President Morty]

Fucking rats man, people who do shit like that should be punished to the fullest extent of law.

?
Rats?
This is a ransomware trojan completely different from a RAT. Unless you meant rat as in an insult.

[xatt]

?
Rats?
This is a ransomware trojan completely different from a RAT. Unless you meant rat as in an insult.

I didn't mean the computer term. I use rat a lot for schemers and raskulls.