English
Search
Main Menu
Forums

STOP(DJVU) Ransomware New Extensions

Started by Mega`Adnan, September 16, 2019, 02:30 PM

Previous topic - Next topic

0 Members and 3 Guests are viewing this topic.

Mega`Adnan

Just posting this as people post their opinions.
This week I had a Ransomware virus attack on my PC, and all my stuff has been encrypted to ".moka" extension. I've searched the decryption program for it, but unfortunately it seems like it hasn't been developed yet.
I know I have to wait for it but if anyone knows any news or updates about it, or is familiar with these stuffs, feel free to post here. :)



Quote from: XanKriegor on November 18, 2015, 03:21 PMAdnan, you are Mega, not Micro and not even faint  :D So fight till the end please.

nino

no backup m8?

just curious how did u get infected?

executed some virus? got ur machine with NAT for remote desktop for exemple?
You Are Losing Time Reading my Signature.

Kaleu

I want to know how you got infected with a ransomware, bl ae lol.

Always try to backup/sync your most important files in the cloud. I don't know about Saudi Arabia but in Brazil you can buy 100GB in Google Drive for the cost of a beer bottle, monthly. Furthermore you could also buy Dropbox plans as they promise to recover your files in case of ransomware infections.
If you are one of those concerned about privacy and has important files to hide, go for MEGA (my favorite). Plus it matches your name.  :D



Mega`Adnan

#3
Quote from: nino on September 16, 2019, 04:19 PM
no backup m8?

just curious how did u get infected?

executed some virus? got ur machine with NAT for remote desktop for exemple?

I've bought this PC like 7-8 months ago. Seller told me not to install any heavy antivirus software because it will heat up the PC and there would be chances that CPU processor will get roasted (Since I live in Dera Ismail Khan city, Pakistan. And it has horrible summer like 45°C+). So they did install some useless USB protecting shit, and I was okay with it.
Later, my friend tried to find some crack on my PC, instead they installed a virus and executed it (Yeah I know, this country is so poor to afford some credit card payment and stuff lol). So, it started opening all ads and stuff and slowed down my PC.
Yeah, I am used to remove adware and stuff by going to Safe mode and using Anti-malware software and stuff, which would solve the problem, whenever that happened.
But this is the first virus I've faced, encrypting all of my files on all drives.
So yeah, that's the story. :D

Quote from: Kaleu on September 17, 2019, 03:27 AM
I want to know how you got infected with a ransomware, bl ae lol.

Always try to backup/sync your most important files in the cloud. I don't know about Saudi Arabia but in Brazil you can buy 100GB in Google Drive for the cost of a beer bottle, monthly. Furthermore you could also buy Dropbox plans as they promise to recover your files in case of ransomware infections.
If you are one of those concerned about privacy and has important files to hide, go for MEGA (my favorite). Plus it matches your name.  :D


The story's above this quote. :D
Also, I don't live in Saudi Arabia (though I was born here). I live in Pakistan now because my family are Pakistani (We were living in Saudi Arabia. Dad had job here. He got retired and government kicked all of us). I don't even do back ups because first, there's a shitty internet which would let you do one task i.e. browsing slows down if I start the uploading. Secondly, I don't trust cloud storage sites, they might sell my data or stuff.



Quote from: XanKriegor on November 18, 2015, 03:21 PMAdnan, you are Mega, not Micro and not even faint  :D So fight till the end please.

Kaleu

QuoteSeller told me not to install any heavy antivirus software because it will heat up the PC and there would be chances that CPU processor will get roasted
Lol... I think you were fooled by the salesman... I can't comprehend how an antivirus would consume that much of resources from your CPU, I would say, maybe from RAM? Yeah, during a deep scan, because I doubt it would be the main alone reason for heating.

QuoteSecondly, I don't trust cloud storage sites, they might sell my data or stuff.
Add an extra (and inviolable) layer of protection by encrypting your files with VeraCrypt before uploading.




Albino

have you tried to restore your volume shadow copies?
https://malwaretips.com/blogs/remove-moka/
just scroll down and you will see the details (step 3).

nino

This Puto open the thread and disappear!

maybe he became a .lazy encrypted person
You Are Losing Time Reading my Signature.

Mega`Adnan

Quote from: Albino on September 18, 2019, 09:42 AM
have you tried to restore your volume shadow copies?
https://malwaretips.com/blogs/remove-moka/
just scroll down and you will see the details (step 3).

Sorry, it's not working. The drop down list doesn't show any previous dates.

NOt.PNG

Quote from: nino on September 18, 2019, 11:05 AM
This Puto open the thread and disappear!

maybe he became a .lazy encrypted person

What do you mean your majesty?
I posted this so I can expect some solutions from anyone. Being inactive for a day doesn't mean I ran away lmao.
If you know the best way to bring back encrypted files, then elaborate. :D



Quote from: XanKriegor on November 18, 2015, 03:21 PMAdnan, you are Mega, not Micro and not even faint  :D So fight till the end please.

nino

#8
Theres really a very small chance you see ur files back, best way would be backup!!

well you rly asked for this rape , no AV and instaling cracks and shits! bl ae.

but what u were doing was like f@#!ing 1000 sluts, gays, being f@#!ed...without protection and dont get SIDA. huahuahuahua
You Are Losing Time Reading my Signature.

XanKriegor

Use NoScript extension, its the protection in the aforementioned case xDD

h3oCharles

QuoteSeller told me not to install any heavy antivirus software because it will heat up the PC and there would be chances that CPU processor will get roasted
WHAT THE f@#! KIND OF A SELLER IS THIS?! WHAT ANTIVIRUS ARE THEY TALKING ABOUT?!?!?!

BBBBBBBBBBBBBBBBBBUUUUUUUUUUUUUUUULLLLLLLLLLLLLLLLLSSSSSSSSSSSSSSHHHHHHHHHHHHHHIIIIIIIIIIIIITTTTTTTTTTTTTT

Mega`Adnan

Hey hey! Come now!
Let's not be like "BoOoO! YoU DiDn'T pRoTeCt YoUr FiLeS!!!111" or "bOoOo!!111 YoU DiDn't UsE CoNdOm11!!!" or whatever. If you wanna focus on this topic, lets just focus on how to decrypt ".moka" extension files. There are many decryption tools developed for other extensions of DJVU ransomware, so why won't they develop it for ".moka" as well? I am not the only one affected by this virus, many others did as well.
So, if you know any news or page about the development of this decryption tool, post it here. Not criticism of my failures, I am not a machine, everyone do mistakes.



Quote from: XanKriegor on November 18, 2015, 03:21 PMAdnan, you are Mega, not Micro and not even faint  :D So fight till the end please.

nino

U R DUMB!!!!! HUAHAUHAUA

now lets back to topic, i dont think this gonna be easy to revert this, cos usually the criptography used is so heavy that when theres a solution, u dont even care anymore.

just say bye to ur files ( 99%porn we know)  download it again and protect ur computer.

ok 1 mistake is aceptable but if u make a mistake again....  >:( >:( >:( >:( porra!!!
You Are Losing Time Reading my Signature.

Kradie

The length a man would go just to save his pornography collection is flabbergasting.

Use Firefox with these addons: ublock origin, privacy badger, decentraleyes, canvas defender, HTTPS everywhere, and noscript security suite. You could also get ProtonVPN and enable Secure Core. Although secure core will cost you. Also you could purchase antivirus such as ESET NOD 32 Internet Security Suite, and Malwarebytes. With all of these, you should be fairly protected.

Global Wormin' - A Friendly Discord Worms Server
https://discord.gg/zvFwZuAKQB

Someone is using my name on WormNET. If you are under suspicion if you aren't with the real Kradie, then pelase confirm my real ID here on TUS or discord @Kradie.

Schemes I mostly play: Big RRz and Roperz.

https://worms2d.info/People/Kradie

Kaleu

Quote from: Kradie on September 23, 2019, 03:50 PM
The length a man would go just to save his pornography collection is flabbergasting.

Use Firefox with these addons: ublock origin, privacy badger, decentraleyes, canvas defender, HTTPS everywhere, and noscript security suite. You could also get ProtonVPN and enable Secure Core. Although secure core will cost you. Also you could purchase antivirus such as ESET NOD 32 Internet Security Suite, and Malwarebytes. With all of these, you should be fairly protected.

All of that shit to be protected when using (((Windows))) XD
Just get some Linux distro and you are fine.