Become a fighter against malware and join the forum at SensorsTech!  The SensorsTech’s forum is the place where you can solve your PC issues and educate yourself about malware. You are welcome to discuss various security topics with our professional team and other users like you! To unlock all features of the forums, you have to create an account. Otherwise, you can only browse the topics without taking part in the discussions. To leave a comment or ask your questions, read our Registration Agreement and create your free account here.


*

tayyab786ae

  • *
  • 1
  • +1/-0
      • View Profile
  • Publish
  • All Files Encrypted with .txt extension
    « on: August 15, 2017, 11:45:39 am »
    Hi Everyone. My PC has been attacked on the 10th August and all of my D drive files has been encrypted with a .txt extension. After my research i found it is called A1 Lock Ransom ware which is a variant of the Globeimposter ransomware virus.

    Can any one help to find a Decryptor for A1Lock ransomware?

    Thanks a lot.

    Taiyab
       

    *

    Execute

    • *****
    • 227
    • +38/-0
    • Your friendly neighbourhood IT guy
        • View Profile
  • Publish
  • Re: All Files Encrypted with .txt extension
    « Reply #1 on: August 16, 2017, 10:28:33 am »
    Hello @tayyab786ae,
    we are aware of the ransomware and you are right - it is a GlobeImposter variant called A1Lock.
    Unfortunately there is no decryption tool created for any version of A1Lock or the GlobeImposter variants (except maybe 1 old variant, but it doesn't work with the newer ones).

    You can read more about the ransomware virus from the article here:
    https://sensorstechforum.com/a1lock-ransomware-removal-restore-txt-files/

    The article will be duly updated if a decrypter or Master unlock key is released.

    Do not pay the ransom and it is also recommended not to re-install your operating system, as there might be a way to restore your data with Data Recovery Tools perhaps. The newer variants have a legitimately strong encryption so try to save the encrypted files you want to recover in the future (if at all possible).
    There is no place like 127.0.0.1

     


    Facebook Comments