Comments for im-infected.com http://www.im-infected.com Need Virus Removal Help? Fri, 11 May 2012 09:42:37 +0000 hourly 1 http://wordpress.org/?v=3.2.1 Comment on EnCiPhErEd Trojan by Nikhttp://www.im-infected.com/trojan/enciphered.html#comment-4929 Nik Fri, 11 May 2012 09:42:37 +0000 http://www.im-infected.com/?p=4983#comment-4929 I wrote a e-mail to Dr WEB team and they made update of his te94decrypt.exe to a new version and with this tool started with -k 103 key all my ENCIPHERED files was saved! I wrote a e-mail to Dr WEB team and they made update of his te94decrypt.exe to a new version and with this tool started with -k 103 key all my ENCIPHERED files was saved!

]]> Comment on EnCiPhErEd Trojan by Pierohttp://www.im-infected.com/trojan/enciphered.html#comment-4922 Piero Mon, 07 May 2012 08:43:26 +0000 http://www.im-infected.com/?p=4983#comment-4922 Thanks a lot! Confirm that I used -k 106 for qwciphered encrypt files in windows xp. Thanks a lot!
Confirm that I used -k 106 for qwciphered encrypt files in windows xp.

]]> Comment on EnCiPhErEd Trojan by Raulhttp://www.im-infected.com/trojan/enciphered.html#comment-4919 Raul Thu, 03 May 2012 20:30:31 +0000 http://www.im-infected.com/?p=4983#comment-4919 Do you have a 64 bits version? Do you have a 64 bits version?

]]> Comment on Privacy Protection by computerhttp://www.im-infected.com/rogue/privacy-protection-virus.html#comment-4918 computer Thu, 03 May 2012 19:55:02 +0000 http://www.im-infected.com/?p=4750#comment-4918 May I just say what a comfort to find a person that truly knows what they are discussing on the internet. You certainly know how to bring a problem to light and make it important.More people should check this out and understand this side of your story. I can't believe you aren't more popular because you definitely possess the gift. May I just say what a comfort to find a person that truly knows what they are discussing on the internet.
You certainly know how to bring a problem to light and make it important.

More people should check this out and understand this side of your story.
I can’t believe you aren’t more popular because you definitely possess the gift.

]]> Comment on EnCiPhErEd Trojan by stingray6w9http://www.im-infected.com/trojan/enciphered.html#comment-4917 stingray6w9 Thu, 03 May 2012 01:51:18 +0000 http://www.im-infected.com/?p=4983#comment-4917 Thank you for the code! I can confirm that -k 106 is working with the .QWCIPHERED extension. Be careful if you have any strange permissions. The user the encryption virus runs under needs "write extended attributes" to encrypt the file, but if the user does not have "modify" rights, the file is encrypted and the copy with the extension is not created. The file looks ok, but indicates it is corrupted when opening. It can be decrypted using the tool, if you add the .QWCIPHERED extension. CAUTION: If the file is not encrypted and you add the extension and run the tool, it encrypts it. Larry, you could move (not copy) all the files with the .QWCIPHERED extension to an external drive (this should give you some space to work with) then copy the files back in groups, decrypting then deleting the encrypted ones. It is a process, but should work. Thank you for the code!
I can confirm that -k 106 is working with the .QWCIPHERED extension. Be careful if you have any strange permissions. The user the encryption virus runs under needs “write extended attributes” to encrypt the file, but if the user does not have “modify” rights, the file is encrypted and the copy with the extension is not created. The file looks ok, but indicates it is corrupted when opening. It can be decrypted using the tool, if you add the .QWCIPHERED extension. CAUTION: If the file is not encrypted and you add the extension and run the tool, it encrypts it.
Larry, you could move (not copy) all the files with the .QWCIPHERED extension to an external drive (this should give you some space to work with) then copy the files back in groups, decrypting then deleting the encrypted ones. It is a process, but should work.

]]> Comment on EnCiPhErEd Trojan by michelerougehttp://www.im-infected.com/trojan/enciphered.html#comment-4916 michelerouge Wed, 02 May 2012 13:09:20 +0000 http://www.im-infected.com/?p=4983#comment-4916 <a href="#comment-4912" rel="nofollow">@Larry </a> te94decrypt.exe -k 106but te94decrypt.exe shows "wrong key" @Larry
te94decrypt.exe -k 106

but te94decrypt.exe shows “wrong key”

]]> Comment on EnCiPhErEd Trojan by michelerougehttp://www.im-infected.com/trojan/enciphered.html#comment-4915 michelerouge Wed, 02 May 2012 13:08:41 +0000 http://www.im-infected.com/?p=4983#comment-4915 <a href="#comment-4911" rel="nofollow">@marino </a> i triedte94decrypt.exe -k 106but te94decrypt.exe shows "wrong key" @marino
i tried

te94decrypt.exe -k 106

but te94decrypt.exe shows “wrong key”

]]> Comment on EnCiPhErEd Trojan by Larryhttp://www.im-infected.com/trojan/enciphered.html#comment-4912 Larry Sun, 29 Apr 2012 21:32:25 +0000 http://www.im-infected.com/?p=4983#comment-4912 Thank you all for posting! It seems -k 106 works for me on .QWCiPhErEd files, but the problem is that when decrypting, the decrypted files are generated beside the encrypted files, which leads to disk overload (there is only 10% of free space left in every of my PC disk). How can I deal with this issue? Will the encrypted files be deleted after decrypted? Thank you all for posting!
It seems -k 106 works for me on .QWCiPhErEd files, but the problem is that when decrypting, the decrypted files are generated beside the encrypted files, which leads to disk overload (there is only 10% of free space left in every of my PC disk). How can I deal with this issue? Will the encrypted files be deleted after decrypted?

]]> Comment on EnCiPhErEd Trojan by marinohttp://www.im-infected.com/trojan/enciphered.html#comment-4911 marino Sun, 29 Apr 2012 10:47:07 +0000 http://www.im-infected.com/?p=4983#comment-4911 Looks like working with - k 106 on .QWCiPhErEd files Looks like working with – k 106 on .QWCiPhErEd files

]]> Comment on EnCiPhErEd Trojan by Matiashttp://www.im-infected.com/trojan/enciphered.html#comment-4909 Matias Fri, 27 Apr 2012 17:47:53 +0000 http://www.im-infected.com/?p=4983#comment-4909 Working with -k 106 :) Working with -k 106 :)

]]>