La pagina originale del Ransomware

In questa pagina vi mostriamo la schermata originale del virus ACCDFISA 2.0

Preventivo ON LINE
Warning! Access to your computer is limited. Your files has been encrypted.

Have you already see that your files are encrypted and desktop locked?

Please don’t panic and send us angry emails or scare us to send claims in police, fbi or others - this is useless.

Please read this instruction carefully, then you will get answers to most of your questions.

We don’t answer to questions which already was answered in this instructions.  Do not waste our and your time.

Stupid questions like - "I have backup and need only 1-2 files and can pay you only 500,1000,1500$ USD etc., We have a small business, this amount is too high" - will be ignored.

Have backup - restore your files from it.

We know that in most cases this is lie, you have no backups and just trying to trick us to get discounts and pay less amount.

Our minimal price for your files is 5000$ USD. We don’t get passwords for free or for 500,1000,1500$ USD etc. We know that you have money.

Latest Updates (lesson learned, bugs fixed).

You have Antichild Spam Porn Protection 2.0 from 22.03.2013. What’s new?

1. Now we have 2 randomly generated cryptographic safe passwords, unlike the previous version when it will be a chance to generate passwords in certain circumstances. Now generating password is impossible in all cases.

2. Now files are encrypted using 2 randomly generated cryptographic safe passwords from 80 to 114 characters long, unlike one 55 characters long password and not cryptographic safe pseudorandom number generator in he previous version.

Now password look’s like this:

First password: 9DF19AB897351C2A0A0FE18A6A73722EDM66BSAl3jBe2a3K8L275j34525b3&E=4RDP4-9y8Q1j3zDa9G9u3bD04t4dFuEO7M2%4zFT
( 104 characters long)

Second password: 6B1783B4656C5433B430F2CC28070B4E6^1HDq9JEV1+9L0SFr9(6aDu3rF8Cg6X7gC3F#D07LAxFgAD7&9G1%6S4k4YFzEm7^2g4PF*C%9y2T92
(112 characters long)

3. All other possible options to get password was fixed.

**** Now only WE can get you the true password to decrypt all your files.

You will read in this instructions about:

1. Why?

2. Our Guarantees

3. General Info

4. About Payment

5. How to get your data back

6. How decrypt process working

1. Why?

We have detected spam advertises illegal sites with child pornography from your computer.
This contradicts law and harm other network users and in this case we have to do next steps:

1. Block access to your desktop.

2. Encrypt your files using Advanced Encryption Standard and 256 symblols randomly generated password and delete source files using DOD 5220.22-M.
(DOD 5220.22-M is the Department of Defense clearing and sanitizing standard - You cant recover your files - NEVER).

3. Sent this randomly generated password to our secure server and delete this password from your computer. (you cant get this password -NEVER)

This password is unique for each computer and stored on our secure server(and then erasing from this server and sending to us) and in each encrypted file.

**** Warning! Don’t delete any our software config files, because it can start encrypt process again and we can’t get you warranty that we will decrypt all your files! In this case you may be loose part of your files forever. If you dont know what to do - better do nothing. ****

2. Our Guarantees

You can send one encrypted file (jpg or bmp or other picture, no a document or not any important file for you) to us and as soon as we decrypt them we send them to you and it will proof that we are able to decrypt them all. Please don’t send us important data like databases etc. to decrypt, because if we will decrypt it and send to you - you will pay us 0$.

We had decrypt databases files to some people and after this they did not pay us any money.
After you will pay us, sure we give you passwords and decrypt tool and of course you can decrypt all your files including databases files.

To send file to us better use sendspace.com (just upload and send link to us) because gmail can block any .exe extensions.

Our guarantee is your decrypting file.

So we dont need to lock your files forever, we just need a money for our work.

Also send us your ID number.

3. General Info

You need to buy Liberty Reserve. 5000 Liberty Reserve USD ( this means 5000 US Dollars ) is a minimal price and cannot be less, no any discounts even if you need only 1 file. When we get payment we will send you passwords and decryption tool to unlock all your files.

You can send files or your computer to any experts or antivirus companies, recovery companies but you just lose your time, money and nerves.

You can go to the police or fbi or other departments - but this is will not help you, we are working about 12 month and noone can trace us, because we are working using chain of servers in different countries and using only Liberty Reserve as payment method (this is offshore payment system ) and withdrawal money using anonymous offshore bank accounts and ATM cards belong to other people.



4. About Payment

You must buy LR (Liberty Reserve) The amount to buy is how we write in our instructions.

1) You need to register on www.libertyreserve.com and make your own account there.

2) Register on exhere.com (this is exchanger who pickup your money via Western Union and transfer your money on your liberty reserve account)

3) You need send some scan copies of your documents to verify your account on exhere or any other exchanger (photo ID, utility bill).

4) Make a new order on exhere.com and put in your LR account info, after this they give you info for WU transfer, now you need go to the bank and make Western Union transfer.

5) Now you need back to exhere.com and log in your account and update your order with MTCN number you got from Western Union. ( without this number they cant get money from you. )

6) Waiting about 12 hours for process your order and when you got money on your libertyreserve account you will send this money on our liberty reserve account (We will give you our Liberty Reserve account number when you will have money on your Liberty Reserve account).

Thats all, this is easy, you just need to read and register on this websites.

All Liberty Reserve exchangers need some documents to verify, exchanger this is 3rd party person who will only exchange money to your LR account and then you will transfer it to our Liberty Reserve account.

We can accept ONLY Liberty Reserve. Sorry, but all other payment methods are not secure for us.

Btw exhere.com is exchanger from Liberty Reserve https://www.libertyreserve.com/en/exchangers approved list.


5. How to get your data back

You have already see files like for example database.mdb(!! to decrypt email id 1111111 to ouremail@gmail.com !!).exe
This is about 256 symbols password protected AES archive contains your file.

You just need password to decrypt it and get your original file from this archive.

How encrypt process working:

1. For example database.mdb is source file wich will encrypted to database.mdb(!! to decrypt email id 1111111 to ouremail@gmail.com !!).exe

2. Then original file database.mdb secure deleted from your disk drive using sectors owerwriting.

3. Original file database.mdb now in AES password protected archive.

This is impossible to crack archive with password like this (this is NOT 6-8 symbols simple password, and have trillions combinations to bruteforce and 1000000’s years to brute it).

This passwords is unique and randomly generated for each computer.

We also take care to secure delete password from your system, previously had copy password to our database of course.

After payment (and once again, ONLY after payment) we will get you passwords and decrypt tool, so you will not need to decrypt each file manualy. Just run it on your server and your files will be decrypted on all disk drives.


6. How decrypt process working

1. You will put 2 passwords given by us in decrypt tool and start it.

2. Our decrypt tool scan your disk drives for files like database.mdb(!! to decrypt email id 1111111 to ouremail@gmail.com !!).exe

3. Encrypt files like database.mdb(!! to get password email id 1111111 to ouremail@gmail.com !!).exe, so you will get unencypted original file database.mdb

4. Delete decrypted database.mdb(!! to get password email id 1111111 to ouremail@gmail.com !!).exe because you will not need more decrypted file, you will have your original source file database.mdb

Also we will get you desktop unlock code and you can run decrypt tool.

Thank You.

Your ID Number and our contacts (please write down this data):

Your Id #:  53423452352   Our special service email: 5462342463463

Recovery Italia, Contatti e sedi Operative

Recovery Italia garantisce una copertura logistica e commerciale su tutto il territorio italiano con i propri centri di roma,milano e torino oltre il servizio di copertura territoriale totale, supportato dal pick-up gratuito con corriere espresso DHL.

CONTATTI

Recovery Italia Virtual Tour

I centri di recupero dati, non sono tutti uguali. Dietro un sito web ben fatto non sempre ci sono aziende qualificate e che ti garantiscono risultati, qualità e sicurezza. Recovery Italia ha realizzato per voi il primo tour virtuale di un centro di data recovery in italia.

VIRTUAL TOUR

Procedura per il recupero dei dati

Scopri come funziona il recupero dati in Recovery Italia,come verranno gestite le tue informazioni personali, come verrá trattato il tuo dispositivo, dall’accettazione in laboratorio alla consegna dei file recuperati.

PROCEDURA

Richiedi una presa ed una diagnosi gratuita

Per poter valutare con precisione il livello di solvibilitá del tuo caso, è necessaria una accurata diagnosi di laboratorio con apparecchiature professionali.Recovery Italia ti offre un servizio di diagnosi e valutazione gratuita oltre un comodo servizio di presa con corriere espresso DHL.

PICKUP

Richiedi assistenza Tecnica

Hai un caso da sottoporci ? Richiedi assistenza tecnica direttamente al nostro staff tecnico. I nostri operatori sono preparati per consigliarti su come affrontare qualsiasi caso di perdita di dati.

ASSISTENZA

Preventivo ON LINE

Nessuno sembra riuscire ad esprimere un preventivo preciso o a fornirti una indicazione chiara dei costi ? Recovery Italia è la prima azienda italiana a fornirti un preventivo chiaro, semplice,definitivo e immediato.

PREVENTIVO

Recupero delle foto da un Samsung Galaxy s2 rigenerato dal produttore

Il caso di un Samsung Galaxy s2 da cui occorre recuperare le foto, da cui sono stati estratti dati non riconosciuti dal cliente, riferiti evidentemente ad una precedente "vita" del dispositivo che era stato ripristinato e rigenerato.
Continua a leggere