Victims of 'rogueware' forced to pay ransom

[ding-dong]

this is really absurb! last week i already fixed 3 pc because of that rougeware and its all the same anti-virus pro.

[newprouser]

the worst kind are the ones which encrypt your files, and if u want ur data back ,the only way is to pay.

has one one encountered such a thing ?

[hellnoire]

I've seen it in action, newprouser. The only solution... is to crack the encryption. What's really bad though is that in the USA... it is considered ILLEGAL to fix that virus! You're not allowed to crack encryption down there!

[newprouser]

now, that, really is news to me !!! it would be nice, if you could share some details about your experiences regarding them.

[hellnoire]

Not much to say... the files got encrypted in a format that only "it" could read... and rather then fix it with the tools that are out now (there weren't as many out then), we did a wipe and reload. So I have only experience seeing it in action... with our "fix" of blowing the computer away and starting over.

These days, there are tools that can/will break the encryption.. I remember Sophos offering information on it.. they'd know far more then I do.

[Ceyfer √]

the worst kind are the ones which encrypt your files, and if u want ur data back ,the only way is to pay.
has one one encountered such a thing ?

Sounds familiar to me.

FileFix Professional is ransomware that requires you to purchase it in order to fix files that have been encrypted on your computer. This program is advertised through a Trojan that has a filename of C:\Windows\system32\fpfstb.dll. When you are infected with this Trojan, every time you open a Office document, PDF, etc, it will encrypt the file so that it becomes unreadable by it's normal application.

When FileFix Professional runs it will scan your computer for encrypted files and then allow you to fix only one of these corrupted files. Unfortunately, if the Trojan is still installed on your computer it would just encrypt it again when you access the document.

Bleepingcomputer: FileFix Pro Removal

[hellnoire]

Damn, if only I knew about that tool when I was fixing my buddy's PC... we wouldn't have had to wipe and reload!