@msalvini
You were hit by Crypt0L0cker, a different ransomware that has no solution at this time.
Please refer to this topic for more information.
TorrentLocker changes it's name to Crypt0L0cker and bypasses U.S. computers
Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.
Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.
Coin Locker - A ransomware that tips its hat to Julius Caesar
Started by
Grinler
, Feb 03 2015 03:22 PM
18 replies to this topic
#16
Demonslay335
-
- Security Colleague
- 4,770 posts
- OFFLINE
Ransomware Hunter
- Gender:Male
- Location:USA
- Local time:07:21 AM
Posted 03 February 2016 - 12:11 PM
ID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic]
RansomNoteCleaner - Remove Ransom Notes Left Behind [Support Topic]
CryptoSearch - Find Files Encrypted by Ransomware [Support Topic]
If I have helped you and you wish to support my ransomware fighting, you may support me here.
Back to top
#17
mitch04
-
- Members
- 15 posts
- OFFLINE
- Local time:11:21 PM
Posted 04 February 2016 - 04:38 PM
Hi, I Tryied the Decrypter program. it did unlock the file but still corrupted... any idea? It did delete the extension file... when I try and open the file it says the file format and extensions of myfile.xls dont match. the file could be corrupted or unsafe. so i click open and just gives me all the corrupted words
#18
Demonslay335
-
- Security Colleague
- 4,770 posts
- OFFLINE
Ransomware Hunter
- Gender:Male
- Location:USA
- Local time:07:21 AM
Posted 04 February 2016 - 08:35 PM
You may not have been hit with this ransomware, it was rather rare and old according to activity in this topic.
Check my previous post about Crypt0L0cker, which uses a similar extension. You can check the ransom note to match which you were hit with.
ID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic]
RansomNoteCleaner - Remove Ransom Notes Left Behind [Support Topic]
CryptoSearch - Find Files Encrypted by Ransomware [Support Topic]
If I have helped you and you wish to support my ransomware fighting, you may support me here.
#19
quietman7
-
- Global Moderator
- 62,063 posts
- OFFLINE
Bleepin' Gumshoe
- Gender:Male
- Location:Virginia, USA
- Local time:09:21 AM
Posted 20 February 2016 - 07:56 AM
What was the extension?Hi, I Tryied the Decrypter program. it did unlock the file but still corrupted... any idea? It did delete the extension file...
These are some of the more common ransomware file extensions appended to encrypted files....ecc, .ezz, .exx, .zzz, .xyz, .aaa, .abc, .ccc, .vvv, .xxx, .ttt, .micro, .mp3, .encrypted, .locked, .crypto, _crypt, .crinf, .r5a, .XRNT, .XTBL, .crypt, .R16M01D05, .pzdc, .good, .LOL!, .OMG!, .RDM, .RRK, .encryptedRSA, .crjoker, .EnCiPhErEd, .LeChiffre, .keybtc@inbox_com, .0x0, .bleep, .1999, .vault, .HA3, .toxcrypt, .magic, .ENC, .locky, .SUPERCRYPT, .CTBL, .CTB2, or 6-7 length extension consisting of random characters?
.
.
Microsoft MVP Alumni 2023, Windows Insider MVP 2017-2020, MVP Reconnect 2016-2023
Microsoft MVP Consumer Security 2007-2015 
Member of UNITE, Unified Network of Instructors and Trusted Eliminators
Retired Police Officer, Federal Agent and Coast Guard Chief
If I have been helpful & you'd like to consider a donation, click 
1 user(s) are reading this topic
0 members, 1 guests, 0 anonymous users
