Kinzeyfranks:
Hello guys,

Please I have a serious ransomware attack on my PC.
Been battling with since three-four days ago.

After I visited the linuxcommand.org page I was prompted to install some files which I thought was part of the learning materials. I never knew it was an eegf ransomware. Now, I have a serious ransomware attack on my PC. It has encrypted all my files and has appended .eegf extension to all of them.

It was followed with messages known as _readme.txt.
The .txt file contains two email addresses namely; support@bestyourmail.ch and supportsys@airmail.cc. and threats that I should pay them without further delay to get my files back.
Been battling with since three-four days ago.

How do I get rid of it and get my files back/de-encrypted?

Iambro:
When you're finally free from this
Kindly stat using Linux �

Iambro:
When you're finally free from this
Kindly stat using Linux �

Contekbbc:
He got the said VIRUS from the same LINUX environment.

Iambro:

That's not Linux bro. As you can see that's windows

Xedmark:
" is encrypted by MD5hash, "am" crypted by Cryptography "a" is crypted by Tripple DES "Big" is crypted by RSA "Boy is crypted by RC5

You can see it's Dead END.

digitalman:
I will try and help you

Mostly these ransomware are hard to find solutions.

It encrypted your files with a random hash key. They kept the hashkey to themselves and can use it to decrypt the files with the same algorithm used to encrypt them.

So unless the unique hashkey is found it's almost impossible to decrypt your file.


Now. There's some few solutions.

I will need 2 files from you.

If you have any backup of just one file that is encrypted in your system, send me the original backup file plus the encrypted version.

For example, let's say you have a picture in your phone which you saved also in your computer. Surely the computer version has been encrypted but the picture is still intact in your phone.
So you now send me both files. The good picture in your phone and the encrypted one on your PC.

What I will do is two fold.

1: I will find the algorithm used to encrypt your files. Normally the ransomware tries to hide the algorithm by changing the extension of the encrypted file but luckily they're mostly same Ransomware Encryption is used on different extensions.
2: Armed with the knowledge of the algorithm used to encrypt your files, I will run both files you send me through my reverse key generator resources to get the original Encryption key used in encrypting your files.
This may take some time. A day or two.

Once I regenerate the original unique key used to encrypt your files, I will pass the key to the decryption algorithm of the same encryption tool and recover all your subsequent files.


If the 2 fold steps works and I am armed with your encryption key, my payment would be N1,000,000 only to give you the keys and the decryption tools.

If you dont want the decryption tool but want me to decrypt all your files for you, the fees will be N250,000 only.

I hope the process is clear. If you have any questions I would be glad to answer.

Cheers mate.

airsaylongcome:


Lol! Just say you want to show off. Person dey write final year project you dey ask for ₦1m. If he had a million he won't have gone to funny places on the net. He would have bought whatever he needed.

Plus with this your modus operandi, you go tey before you go brute force the encryption algorithm. Too damned many unscientific assumptions

digitalman:


I have used a lot of "ifs".

So it may not work.

I have not made any assumptions.

Research the method I listed which I would use and find that it's the easiest way to have a chance at decryption of ransomware.

There's a lot of these methods online which you can verify.

At least I have given a hint which a other persons can use and try recover precious files.

As for my cost. It doesn't matter.

What matters is that with the methods of recovery it's possible for any determined person to do the same thing.

Notice that it's not 100% guaranteed.

The success depends on a lot of factors.

I sent this post as an educational post.

Thanks.

Deicide:
md5hash seriously?

Xedmark:
This forum is renamed to comedianLand. Symmetric is now A.K. A Private Key ? Which one is known as PRIVATE KEY? Symmetric or Asymmetric? Chai!! Son, I know your types are good customer on google and Youtube go back and check.

airsaylongcome:


Okay so here's the low down on security (and any problem generally); given infinite time and infinite resources ANY problem can be solved. But you never have infinite time or resources. You are planning to brute force an encryption algorithm that you don't know anything about, and you want to do that on consumer grade hardware, starting with a known file that you aren't sure exactly matches the encrypted file. Too many damned variables and unknowns. Yes if you were a Government agency with bleeding edge computing you may stand a chance. Even the Feds in the US with formidable resources still have to go to Apple or WhatsApp when they want to brute force their way. And you want to attempt something similar without knowing the algorithm. I wish you luck.

And I pray the OP is able to start his project afresh and finish it in good time. I'm off to back up my Udemy downloads to Google Drive before I hear say dem shoot bird, bird mama fly

digitalman:

You said a lot of things but let me put you in order.

Theres a lot of free software that can be used to find the key and they run in any PC.

It doesn't take much time to get the keys as long as you supply the original file and the encrypted file.

Is there anything I wrote that you didn't understand?


Note: I'm happy you admit that it's not an easy job per see hence you can see why my quoted price is high.

airsaylongcome:


You should shut the f*ck up when you don't know a thing about encryption.

A symmetric encryption is a Private Key encryption. A single private or secret key is used as the key input during encryption and decryption. An Asymmetric Encryption also called a Public Key encryption uses two keys, a private key to encrypt the payload and a public key to decrypt it.

Xedmark:


U went to exactly where I sent u."Google boys" Now search for Asymmetric encryption. This You will never be worthy of the time.

airsaylongcome:


Okay. Let everyone (myself included) remain and excel with their limited knowledge

A brute force attack on a 256-bit key AES algorithm is taking 9.63×10^52 years to brute force. That is billions of years! And this is for a simpler Symmetric Key encryption running on a super computer o. Not consumer grade developer laptop with 8-16gb RAM and heavily limited processor. We haven't thought to discuss brute forcing a Public Key algorithm that is inherently more difficult.