con a ransomeware maker | Bitcointalksearch.org

khatarnak

jr. member

Activity: 125

Merit: 3

Karma is like 69 : You get what you give

If ransomeware had a timer i think you are done right now Grin

If your system is still alive check the massage box and Compare it with famous ransomwares massage boxes.
Most people using Free opensource ransomwares this days and most of them have a backdoor created by the coder of project.(because they are for educational purpose)
Check "hidden tear" on the internet and maybe you could Learn more about it.

BitcoinSupremo

copper member

Activity: 1442

Merit: 529

Don't want to sound harsh but this is totally your fault if you have not made a backup of your pharmacy data. I can understand that as a pharmacy you maybe not computer literate but that does not mean that you should have not pay a small amount to an IT person in order to make daily, weekly or monthly backups of your data. Sorry for your loss but if you don't have any backup there is nothing you can do.

Theb

hero member

Activity: 1680

Merit: 655

Even if they gave you a decryption key there is no guarantee that your computer is really clean from any kind of malware, virus, or malicious software left by the ransomware. They might still be monitoring your computer after your device has been unlock in order to steal more from you. You should consider your computer good as gone and if somehow you have retrieved some files from your device you should assume that it is compromised by the ransomware. The only way to retrieve your files is if you have back up your computer before the attack even happened.

seoincorporation

legendary

Activity: 3346

Merit: 3130

Quote from: johnsmith1337 on September 08, 2018, 03:29:36 AM

what about trick the hacker with double spend or unconfirmed transaction ?

That will not work, because to make a double spend you need to send other transaction with the same inputs before the other one confirm, for the next block one of them will confirm and the other one will be tagged as double spend. For sure the software should wait for a confirmation, if it's a double spend it never will get that confirm. The ransomeware you describe sound like the wanna cry, maybe with the microsoft patch you can fix the problem

https://answers.microsoft.com/en-us/windows/forum/windows_10-security-winpc/wanna-cry-ransomware-update-5212017-fix/5afdb045-8f36-4f55-a992-53398d21ed07

At end if your only option is to pay them, remember that your information has been already compromised, nothing warrant you they will not keep a copy. So, good luck, if some day you want to avoid that kind of ransomware here is the final solution: https://www.ubuntu.com/download/desktop Wink

aleksej996

sr. member

Activity: 490

Merit: 389

Do not trust the government

A lot of people here will instruct you to not pay the ransom.
I disagree, if you don't have a choice. If the data is worth to you more than double the amount that you will pay for example, you might want to risk it and pay the ransom.

In future please be more careful and for god's sake, don't run Windows on important systems.
Especially not outdated versions like Windows XP.

Best you can do is inform yourself more about the specific ransomware that you got infected with and inform us so we can try to help you.
Do not come here expecting that you will get out of this without paying for your mistake.

GreotDollyce

newbie

Activity: 92

Merit: 0

It will be better if you do not follow the instructions that are given to you by the hackers. Because the chances are high that they are just planning to extract money from you without fulfilling their end of the bargain.

SDRebel

hero member

Activity: 571

Merit: 507

Quote from: johnsmith1337 on September 08, 2018, 02:24:04 PM

Quote from: coin-investor on September 08, 2018, 10:42:35 AM

Quote from: johnsmith1337 on September 08, 2018, 01:43:34 AM

the issue it contain the pharmacy data (customers,bills) we are now out of bussness Sad

That's surprising these kinds of data needs protection what kind or brand of anti virus are you using and tell us the details on how did this things happen, that kind of malware are now detectable now because they are exposed and anti malwares now have a features that can detect that

at least can you help me to try and mix it with social engineer ?

any way to sign a transaction with an amount i don't have it in my wallet

bitcoin is built to not do exactly what you want to do. No, what you want to do is not possible and that is the idea of bitcoin
e.g. you can't charge back and you can't fake a transaction" - which is what you want to do even though you are not using those words

Tallay

newbie

Activity: 52

Merit: 0

Do they actually have the decryption key, or they just already have cleaned your drive? So don’t give the money without being sure. There are many ways to take back the encryption by reverse engineering which will be less costly.

hugeblack

legendary

Activity: 2702

Merit: 4002

Why do all your questions focus on learning "how to scam ~~others~~ the hacker" rather than concentrate on restoring your files?
Restoring your files will be much easier than doing those operations so stop thinking about it.

Quote from: johnsmith1337 on September 08, 2018, 03:29:36 AM

what about trick the hacker with double spend or unconfirmed transaction?

Quote from: johnsmith1337 on September 08, 2018, 10:00:03 AM

can i make a transaction who never confirmed or canceled later or un-confirmed transaction ?

Quote from: johnsmith1337 on September 08, 2018, 02:24:04 PM

any way to sign a transaction with an amount I don't have it in my wallet

In general, look for a solution at the nearest computer specialist.
Do not pay to anyone before asking him to use an escrow service.

bob123

legendary

Activity: 1624

Merit: 2481

Quote from: johnsmith1337 on September 08, 2018, 02:24:04 PM

any way to sign a transaction with an amount i don't have it in my wallet

No.

Either search for a decryption tool for your specific ransomware, or live with the fact that your data is gone.

johnsmith1337

newbie

Activity: 6

Merit: 0

Quote from: coin-investor on September 08, 2018, 10:42:35 AM

Quote from: johnsmith1337 on September 08, 2018, 01:43:34 AM

the issue it contain the pharmacy data (customers,bills) we are now out of bussness Sad

That's surprising these kinds of data needs protection what kind or brand of anti virus are you using and tell us the details on how did this things happen, that kind of malware are now detectable now because they are exposed and anti malwares now have a features that can detect that

at least can you help me to try and mix it with social engineer ?

any way to sign a transaction with an amount i don't have it in my wallet

coin-investor

hero member

Activity: 3024

Merit: 614

Leading Crypto Sports Betting & Casino Platform

Quote from: johnsmith1337 on September 08, 2018, 01:43:34 AM

the issue it contain the pharmacy data (customers,bills) we are now out of bussness Sad

That's surprising these kinds of data needs protection what kind or brand of anti virus are you using and tell us the details on how did this things happen, that kind of malware are now detectable now because they are exposed and anti malwares now have a features that can detect that

cissrawk

sr. member

Activity: 1218

Merit: 410

Secure your crypto : https://notyourkeys.org

Quote from: johnsmith1337 on September 08, 2018, 10:00:03 AM

can i make a transaction who never confirmed or canceled later or un-confirmed transaction ?
any thing guarantie the money don't go to him

I bet the hacker already know how the bitcoin work, and he will wait the transaction confirmed first before he send you a decryptor.
If you don't want send money to that hacker, then just don't send it. After bitcoin transaction get confirmed, then you can't reverse it or cancel it.

BrewMaster

legendary

Activity: 2128

Merit: 1293

There is trouble abrewing

Quote from: johnsmith1337 on September 08, 2018, 10:00:03 AM

can i make a transaction who never confirmed or canceled later or un-confirmed transaction ?
any thing guarantie the money don't go to him

no there are none.
besides the hacker would probably wait for the transaction to confirm before doing anything and as bob said above they do NOT give you anything even if you pay them.
on top of that there are ways to make an unconfirmed transaction confirm faster by increasing its priority. for example by using CPFP. so you may end up conning yourself trying to con the hacker!

johnsmith1337

newbie

Activity: 6

Merit: 0

can i make a transaction who never confirmed or canceled later or un-confirmed transaction ?
any thing guarantie the money don't go to him

cissrawk

sr. member

Activity: 1218

Merit: 410

Secure your crypto : https://notyourkeys.org

Don't pay anything to that hacker, i read a story on another forum if the hacker doesn't give your files back or key to decrypt it after he paid him.
Did you already check the ransom decryptor? Some antivirus company create it for free, such as McAfee, AVG, Kaspersky and Bitdefender. Just take a look at the last extension on your files (ex : ransom.jpg.ransom) and try to find the decryptor. However, not all ransom have decryptor, you maybe can contact some antivirus company to create the decryptor (probably will not free).

Actually, there's a community that offer free if you have the ransom note and encrypted file, just send it to them. MalwareHunterTeam, but idk if they can help you or not.

bob123

legendary

Activity: 1624

Merit: 2481

Quote from: johnsmith1337 on September 08, 2018, 03:29:36 AM

what about trick the hacker with double spend or unconfirmed transaction ?

No. That won't work.

First, you are never guaranteed to succeed in a double spend of a 0-conf-transaction.
Second, you won't get the decryption key (if you do at all) before the transaction has a few confirmations.

But the majority of ransom wares do NOT give out the decryption key after paying the ransom. That would be way too much infra structure needed.

Please post WHICH ransomware you got infected with. There might be free decryption tools already.

johnsmith1337

newbie

Activity: 6

Merit: 0

what about trick the hacker with double spend or unconfirmed transaction ?

bob123

legendary

Activity: 1624

Merit: 2481

Do NOT pay the ransom.

You are NOT GUARANTEED to get the decryption key once you have paid the ransom. Some don't even have a decryption key anymore or simply just wipe the whole drive.

The best is to ignore the warning, disconnect all affected drives and put them aside. DON'T TOUCH THE DRIVES ANYMORE.
If you have backups, use them.

Decryption tools emerge decently fast after a new ransomware has been found.
At least as long there is a possibility of reverse engineering the key or compromising the c&c server.
Most ransomwares do have either backdoors, are bad implemented, or have a vulnerability to retrieve the decryption key(s) from the server. The chances are relatively high of getting files back if you have the time to wait.

You may have been infected with an old ransomware. Can you please post a picture (e.g. take a picture with your mobile, upload it to https://imgur.com/, give us the link) of the ransom screen ?
Also, what ending do the files have ? This is necessary to know to find out which kind of ransomware this is.

It is CRUCIAL to know which malware EXACTLY you are infected with. This fully determines the next possible steps for you to take (especially since you are running a business).

nc50lc

legendary

Activity: 2534

Merit: 6080

Self-proclaimed Genius

Quote from: johnsmith1337 on September 08, 2018, 01:43:34 AM

the issue it contain the pharmacy data (customers,bills) we are now out of bussness Sad

I'm afraid that this isn't Bitcoin-related in terms of technical support.
Usually, those hackers and are just using Bitcoins as the "ransom money" because it's widely used and with the help of "mixing services", transactions could become anonymous.
The ransomware malware and viruses however, aren't directly linked to Bitcoin's protocols.

I'd suggest to shut it down (don't do anything) until you get someone who's knowledgeable on this (there's a couple of OS-related automated backups that can undo this that can be affected by the virus/malware if stayed active).
Most users here wont be able to help you with your issue, you really need to consult a good Computer Technician for this.

Topic: con a ransomeware maker (Read 438 times)