Monday, May 23, 2016

How to recover from Locky Virus

HOW TO REMOVE LOCKY VIRUS

This page aims to help you remove Locky Virus Ransomware. These Locky Ransomware removal instructions work for all versions of Windows. We were recently asked in our reader’s comments about how to restore “locky datei” and we feel we should help users understand how to do it. To restore “locky datei” you will likely have to revert back to a previous date before the ransomware infected your PC. But, it may be very hard to do so, as the virus will undoubtedly try to hinder your process and may even succeed. This ransomware uses a different encryption method from most of its other peers – the AES-128 military grade encryption. The Aes-128 encryption is a step up for the creators of crime software, as it has previously not been exploited in such a way. Considering that the targets of this scam are predominantly German citizens, it is likely you will have your hands quite full. The _Locky_recover_instructions.txt ransom note is practically identical to a lot of others out there, so this is a general shoutout: DO NOT PAY UP!

locky virus removal

There are several reasons for this, the most notable of which are:

If you pay, you will have to login with accounts that may already be exposed. If they are not already stolen however, you basically risk showing them to people who are already monitoring you via a Trojan.
By paying up you may or may not recover your files – but every time someone pays the ransom, the criminals grow stronger. They develop their software even more and people like you suffer
There is really no reason for them not to give you your files back – but at the same time, there is always the chance you will pay but the files are not released and you will continue to search for a “locky datei” solution.

If your files have already been encrypted by Locky Virus, then you are in some serious trouble. Don’t panic though – we’ll try our best to help you with this article. What you are facing is a very dangerous virus of the ransomware type. These viruses have gained a lot of notoriety, because they encrypt your files and make them unusable, but the process is not reversed if you delete the virus. This gives the hackers a lot of leverage that they will undoubtedly use to blackmail you for a ransom, if they haven’t already. You will need to learn some more basic info on ransomware viruses before you can deal with fichier locky effectively, so please keep reading. This will also shed a light how to perform a “locky datei” recovery and how to avoid getting a locky recover instructions ransom note.

Locky Virus – first stage

When your computer was first infected with the ransomware it began encrypting your files. Depending on the size of your HDD and how much data you had the process could have taken a couple of hours or even days. The virus remains out of sight during this, but you may have spotted signs of its presence – your PC performing poorly than usual, programs taking ages to load. Encryption is a memory and CPU intensive process and takes a toll on your system resources – in the future if your computer is working poorly open the task managed and look at what’s eating the resources. Ransomware viruses usually try to pose as windows programs and services, so if you see two of those with the same name and one of them is taking a lot of CPU power you’ll have your culprit – immediately shut down the process and delete all associated files or better yet pull the plug on your PC and find an expert.

The locky virus ransom note.

Locky Virus – reveal

If your files have already been encrypted, then you have probably already seen the ransomnote generated by the virus. It probably has some kind of timer to put pressure on you and it demands the payment to be made in BitCoins. The criminals are now hoping that the surprise shock will put you to the edge and you’ll pay them the ransom. Well… that’s really not a good idea, for a couple of reasons.

Paying money to cyber criminals only encourages them to get better at their craft and extort even more people.
You are not guaranteed in any way that your files will be decrypted successfully if you make the payment.
There is absolutely no reason to pay until you’ve tried all the free methods first.

The methods we’ve provided at our guide do not provide guaranteed recovery of all files, but they are an excellent start. Paying the ransom should only ever be considered if all other options are exhausted and the documents encrypted are worth much more than the ransom money.

There is a good chance you have a Trojan horse in your computer

While it is certainly possible that you unknowingly installed Locky Virus on your own computer chances are that a Trojan horse actually did it. Trojan horse viruses are the preferred method of spreading ransomware – they are very subtle and not all anti-malware programs can detect them and they can remain on an infected computer for a really long time. Trojan horse viruses that deliver ransomware are also known as “droppers” and you should make sure that you don’t have one of these installed on your computer. It can always download new ransomware if left alone. Unfortunately, such a search is next to impossible to perform manually – you’ll have to trust an anti-virus or an-anti malware program with it. If you don’t have one or if the one you have failed you with the ransomware feel free to check out our recommendation by clicking on one of the banners on this page.

SUMMARY:

Name	.Locky
Type	Ransomware
Danger Level	High (Ransomware viruses are of the highest threat level there is)
Symptoms	PC slowness followed by file encryption and ransom demand.
Distribution Method	Trojan horse “droppers”, sometimes directly via email attachments and malicious websites.
Detection Tool	Ransomware are notoriously difficult to track down, since they actively try to deceive you. Use this professional Locky Virus scanner to make sure you find all files related to the infection.Sponsored

Locky Virus Ransomware Removal

Readers are interested in:

Best Malware Removal Tools

Malware Prevention Tips

Reboot in Safe Mode (use this guide if you don’t know how to do it).

This is the first preparation.

The first thing you must do is Reveal All Hidden Files and Folders.

Do not skip this. Locky Virus may have hidden some of its files.

Hold the Start Key and R – copy + paste the following and click OK:

notepad %windir%/system32/Drivers/etc/hosts

A new file will open. If you are hacked, there will be a bunch of other IPs connected to you at the bottom. Look at the image below:

127.0.0.1 31.41.47.37 #Locky – Ransomware
127.0.0.1 188.138.88.184 #Locky – Ransomware
127.0.0.1 85.25.138.187 #Locky – Ransomware
Attention: Some of the new Locky version might be using other IPs.

If there are suspicious IPs below “Localhost” – write to us in the comments.

Type msconfig in the search field and hit enter. A window will pop-up:

Go in Startup —> Uncheck entries that have “Unknown” as Manufacturer.

Press CTRL + SHIFT + ESC simultaneously. Go to the Processes Tab. Try to determine which ones are a virus. Google them or ask us in the comments.

WARNING! READ CAREFULLY BEFORE PROCEEDING!

Right click on each of the virus processes separately and select Open File Location. End the process after you open the folder, then delete the directories you were sent to.

Type Regedit in the windows search field and press Enter. Once inside, press CTRL and F together and type the virus’s Name.

Search for the ransomware in your registries and delete the entries. Be extremely careful – you can damage your system if you make a big mistake.
Type each of the following in the Windows Search Field:

%AppData%
%LocalAppData%
%ProgramData%
%WinDir%
%Temp%

Delete everything in Temp. The rest just check our for anything recently added. Remember to leave us a comment if you run into any trouble!
Look for these files:

%UserpProfile%\Desktop\_Locky_recover_instructions.bmp
%UserpProfile%\Desktop\_Locky_recover_instructions.txt
%Temp%\[random].exe

Additionally, type Regedit in the windows search field, and deal with the following registries:

HKCU\Software\Locky
HKCU\Software\Locky\id
HKCU\Software\Locky\pubkey 
HKCU\Software\Locky\paytext
HKCU\Software\Locky\completed
HKCU\Control Panel\Desktop\Wallpaper

How to Decrypt files infected with the Locky Virus

There is only one known way to remove the virus’ encryption that MAY work (no guarantees) – reversing your files to a previous state. There are two options you have for this:

The first is using a system backup. Search for Backup and Restore in the windows search field —–> “Select another backup to restore files from”

If you have no backups, your option is Recuva

Go to the official site for Recuva and download its free version. When you start the program, select the file types you want to recover. You probably want all files. Next select the location. You probably want Recuva to scan all locations.

Click on the box to enable Deep Scan. The program will now start working and it may take a really long time to finish, so be patient and take a break if necessary.

You will now get a big list of files to pick from. Select all relevant files you need and click Recover.

Tuesday, March 24, 2015

Mail PassView is a small password-recovery tool

Mail PassView is a small password-recovery tool that reveals the passwords and other account details for the following email clients:

Outlook Express
Microsoft Outlook 2000 (POP3 and SMTP Accounts only)
Microsoft Outlook 2002/2003/2007/2010/2013 (POP3, IMAP, HTTP and SMTP Accounts)
Windows Mail
Windows Live Mail
IncrediMail
Eudora
Netscape 6.x/7.x (If the password is not encrypted with master password)
Mozilla Thunderbird (If the password is not encrypted with master password)
Group Mail Free
Yahoo! Mail - If the password is saved in Yahoo! Messenger application.
Hotmail/MSN mail - If the password is saved in MSN/Windows/Live Messenger application.
Gmail - If the password is saved by Gmail Notifier application, Google Desktop, or by Google Talk.

For each email account, the following fields are displayed: Account Name, Application, Email, Server, Server Type (POP3/IMAP/SMTP), User Name, and the Password.
If your email program is not supported by Mail PassView, you can still recover your password by using this Password Sniffer

DOWNLOAD

http://www.nirsoft.net/toolsdownload/mailpv.zip

Monday, September 15, 2014

Unlocking by code Huawei Ascend Y530

How to unlock Huawei Ascend Y530

Unlocking Huawei Ascend Y530 by code is very easy,
it is also safest and non-invasive method of unlocking your phone.
To get code for unlock Huawei Ascend Y530 You need to provide
IMEI number of Your Huawei. Type on keyboard *#06# or
remove battery from Your Huawei Ascend Y530 to check IMEI number.
IMEI is written on the information label as shown in this picture.

To unlock Huawei phones You need to provide us with IMEI number and
model of Your phone.Huawei Unlocking process is safe and easy.
We provide all codes available for unlocking. Codes are displayed as 4 codes
separated by commas NCK - NETWORK code ( the first one )
SPCK - Service provider code or subset Unlock PIN
( second code and the third one )
We also provide the CODE to unlock the counter,
if phone asks for "simlock block unlock reset key"( the last one )

To enter unlock code for Huawei phones:
1. Insert foreign (Unaccepted) SIM card
2. Enter the first code received from sim-unlock.net.
If the first code will not work try the second one, etc.
3. Your phone is unlocked now !
In some cases You need to enter the last code,
confirm unsuccesfull message and enter first code.

Available options for unlock Huawei Ascend Y530

Products to unlock simlock from Huawei Ascend Y530

Tuesday, September 9, 2014

3 Ways to Crack Yahoo Email Password in Windows 8.1/8/7/Vista/XP

"I forgot my Yahoo mail password, and I have important emails in it and want to get them back in urgent. What should I do to crack the Yahoo mail password?"

As an important email account, we always take it very seriously. At the time we created this Yahoo mail, we have set a security question and alternative email address in case we would forget it one day. Thus, when the disaster happens, we have access to fix it. Actually, it's not so hard to hack the forgotten password legally; we have several ways for Yahoo mail password cracker – the best Password Recovery is included. Check them below.

Way 1: Crack Yahoo Email Password from Official Site

If you remember your security questions of your Yahoo mail, you can easily retrieve your password from Yahoo Mail Official Site. Perform this Yahoo mail password reset as following steps:

Step 1. In the loading page, click "I can't access my account. Help".
Step 2. Then choose "I have a problem with my password" and click "Next".
Step 3. Then follow the instruction on the interface, answer the security questions to retrieve your Yahoo email password.

Way 2: Yahoo Mail Password Hack from Chrome/Firefox Browser

If you can't remember your security question even your email address, you also have another way to hack Yahoo mail password. If you have Chrome or Firefox on your computer, and you have selected "Automatically Login" when logging to your Yahoo mail, you can easily get back your forgotten Yahoo account password. Since the two browsers offer checking saved password option, you can use this method to Yahoo mail password hack.

Just take Chrome as an example to see the detailed operation.

Step 1. Enter "chrome://settings/" on your Chrome.
Step 2. Select "Show Advance Settings" in the bottom of the window.
Step 3. Find "Password and forms" option and then click on "Manage saved passwords".
Step 4. All accounts that you have saved password with Chrome will be displayed. Select your Yahoo mail account and select "Show" in password tab.

Way 3: Get Password Recovery for Yahoo Email Password Cracker

If you have failed to do Yahoo mail password reset with the two ways we talked about above, then this best Yahoo email password cracker – Password Recovery can help you to recover forgotten Yahoo password with only a few clicks. No more high skill is needed.

Here is the instruction of performing Password Recovery to reset Yahoo account password.

Download SmartKey All-in-one Password Recovery Bundle:

Size: 31.15MB

Secure Download

Step 1. Download and run this Yahoo email password cracker. Then choose "Recover Email and Internet Browser passwords".
Step 2. Choose "Internet Password Recovery", and click "Start Recovery" and then choose "Recover Firefox Password" from the down-drop list.
3
Step 3. Choose to retrieve your Yahoo mail password.