Files encrypted by (.ACFJKSO extension) ransomware

  • Thread starter Thread starter prakhar043
  • Start date Start date
P

prakhar043

Guest
Dear Team,


I am facing an issue with my windows 10 PC that some of my documents are renamed with '.ACFJKSO' extension. If I am trying to rename the file nothing is happening.

From these symptoms I realized that it is a Torjan- Ransom like CBT- Locker.

Does any one have a proper solution for this problem?


Inside all folders there is one' .txt' file named as ACFJKSO-DECRYPT.txt. The content inside this test file is as below mentioned.



---= GANDCRAB V5.0.4 =---



***UNDER NO CIRCUMSTANCES DO NOT DELETE THIS FILE, UNTIL ALL YOUR DATA IS RECOVERED***



*FAILING TO DO SO, WILL RESULT IN YOUR SYSTEM CORRUPTION, IF THERE ARE DECRYPTION ERRORS*



Attention!



All your files, documents, photos, databases and other important files are encrypted and have the extension: .ACFJKSO



The only method of recovering files is to purchase an unique private key. Only we can give you this key and only we can recover your files.





The server with your key is in a closed network TOR. You can get there by the following ways:



----------------------------------------------------------------------------------------



| 0. Download Tor browser - https://www.torproject.org/



| 1. Install Tor browser

| 2. Open Tor Browser

| 3. Open link in TOR browser: http://gandcrabmfe6mnef.onion/aa26b055c8d83b98

| 4. Follow the instructions on this page



----------------------------------------------------------------------------------------





On our page you will see instructions on payment and get the opportunity to decrypt 1 file for free.





ATTENTION!



IN ORDER TO PREVENT DATA DAMAGE:



* DO NOT MODIFY ENCRYPTED FILES

* DO NOT CHANGE DATA BELOW

More...
 
Back
Top