Malware- Wana DecryptOr - Need some help

DunDidIt2X

DunDidIt2X

Elite Member
Joined
Mar 22, 2012
Messages
2,863
Reaction score
2,432
One of my clients machines got hit by a malicious encryptor 'Wana DecryptOr 2.0 Anyone aware of or know a program to unlock these files?
 
Advertise on BHW
This is what's hitting the NHS in the UK today, I gather.

Is this any good to you?

http://sensorstechforum.com/wncry-file-virus-remove-restore-files/
 
MisterF said:
This is what's hitting the NHS in the UK today, I gather.

Is this any good to you?

http://sensorstechforum.com/wncry-file-virus-remove-restore-files/
Click to expand...

That looks to be it. Let me give me a try. Thank you.
 
Yes it's global, many major companies here in Portugal have been attacked today.
 
related question, if someone paid this ransom by bitcoin,
1). what is guarantee?
2). can the security forces trace the bitcoin reciever?
 
I work for the NHS and this has affected our entire region, so much so that our hospital is turning away patients from our A+E department, not entirely sure if its specifically targeted the NHS but it seems like a pretty scummy form of ransomware, people involved with get serious jail time when caught though.
 
ScottyDog said:
I work for the NHS and this has affected our entire region, so much so that our hospital is turning away patients from our A+E department, not entirely sure if its specifically targeted the NHS but it seems like a pretty scummy form of ransomware, people involved with get serious jail time when caught though.
Click to expand...
I'm with the NHS too. In the health board I work in, nothing is actually stored on the PC, its deployed from the server. I would personally let them go fuck themselves and redeploy the OS from the server.
 
Whoever that douchebag is... Hell now has a spot for him/her - a VIP spot.
 
Yeah seen the NHS is getting hit all over with this today, which I found surprising given how low the ransom is. But it seems it's not just the NHS, this thing has gone viral now

https://www.rt.com/news/388153-thousands-ransomeware-attacks-worldwide/
 
t0mmy said:
Yeah seen the NHS is getting hit all over with this today, which I found surprising given how low the ransom is. But it seems it's not just the NHS, this thing has gone viral now

https://www.rt.com/news/388153-thousands-ransomeware-attacks-worldwide/
Click to expand...
The thing that bamboozles me is that IT in the NHS is so resistant to upgrading their OS. Whilst I can appreciate first hand that a Windows update can bugger up some programs at work, it's a damn sight easier to fix a gubbed program than it is to deal with these tadgers. The PCs in my lab got updated last week and it broke a program we use daily but thankfully it was fixed pretty much right away (it was a pretty simple Access database fix).

The thing is though, there was no internal announcement about this, but they're always sending newsletters via the internal email system about how great they are.
 
MisterF said:
This is what's hitting the NHS in the UK today, I gather.

Is this any good to you?

http://sensorstechforum.com/wncry-file-virus-remove-restore-files/
Click to expand...

DL and opened file it immediately said the app was not a valid win 32 product. ugh
 
Hey guys, if you're using Windows you better get your Windows updated NOW.

http://www.bbc.com/news/technology-39901382

According to the above link, it is caused by some vulnerability issue and Microsoft did release a patch back in March to resolve it... however, it seems that many users failed to update.

So update now, folks!
 
swon said:
I just got this as an alert from the Business Insider app. Looks like this thing going big.
I guess it's time to allow those Windows Updates you have been delaying for the last several months.

http://www.businessinsider.com/telefonica-and-other-firms-have-been-infected-by-wannacry-malware-2017-5?r=DE&IR=T
Click to expand...

A massive cyberattack attack using leaked NSA exploits has hit 74 countries and it's still spreading
 
Try googling "nomoreransom" it's a site with Most decrypting tools when your computer got infected with ransomware shit!

Good luck
 
SolveMyMaze said:
The thing that bamboozles me is that IT in the NHS is so resistant to upgrading their OS. Whilst I can appreciate first hand that a Windows update can bugger up some programs at work, it's a damn sight easier to fix a gubbed program than it is to deal with these tadgers. The PCs in my lab got updated last week and it broke a program we use daily but thankfully it was fixed pretty much right away (it was a pretty simple Access database fix).

The thing is though, there was no internal announcement about this, but they're always sending newsletters via the internal email system about how great they are.
Click to expand...

Yea but the NHS has how many computers ? 10k, 100k? Cost alone would be big enough but logistically everything has to work without fail. It's not like you can tweak some stuff on 100k machines if a program don't work with the new OS :-)
 
Advertise on BHW
You must log in or register to reply here.
Sign up now!

Main Menu

Home Main Forum List Black Hat SEO White Hat SEO BHW Newbie Guide Blogging Black Hat Tools Social Media Downloads

Marketplace

Account Selling Content / Copywriting EBooks / Methods Hosting Misc Proxies For Sale SEO - Link building SEO - Packages Social Media Social Media - Panels Web Design More

Making Money

Affiliate Programs Hire a Freelancer IM Journeys Making Money Pay Per Click Site Flipping Want to Buy

BlackHat World

Dispute Resolution Forum Suggestions & Feedback Introductions Lounge
Back
Top