CryptXXX ransomware

[pclab]

Hi Guys

I had a client that was hit by CryptXXX. The client is willing to pay the ransomware (2.1BC) but acording to several tools (Kasperksy and Trend Micro), they say it can be decryptable.
I had some hard work to get 3 or 4 files unencrypted, because both tools ask for the encrypted and original files.

The problem is that the decrypt software keeps telling me that the files don't match.
The sizes really don't match by several bytes, but I have edited them on Winhex to be the same size, and still continues to say that they are not a match.

Did any of you ever decrypted CRYPTXXX files? Did it worked smoothly or what?

Thanks

 

[Amarbir[CDR-Labs]]

Hi Guys

I had a client that was hit by CryptXXX. The client is willing to pay the ransomware (2.1BC) but acording to several tools (Kasperksy and Trend Micro), they say it can be decryptable.
I had some hard work to get 3 or 4 files unencrypted, because both tools ask for the encrypted and original files.

The problem is that the decrypt software keeps telling me that the files don't match.
The sizes really don't match by several bytes, but I have edited them on Winhex to be the same size, and still continues to say that they are not a match.

Did any of you ever decrypted CRYPTXXX files? Did it worked smoothly or what?

Thanks

Hi pclab ,
this virus has many variants only some are decrypt able brother