Skip to content

Konstantinos Tsoukalas

Konstantinos is the founder and administrator of Wintips.org. Since 1995 he works and provides IT support as a computer and network expert to individuals and large companies. He is specialized in solving problems related to Windows or other Microsoft products (Windows Server, Office, Microsoft 365, etc.).

11 Comments

  1. danny
    May 19, 2016 @ 1:31 am

    we got a virus. it has the website payments ending in onion.city onion.cab with the previous the encrypted code given by the virus.

    cannot figure out how to get the files back.
    the .crypt extensions on the files show on many of the files and the outlook files *.pst are also inaccessible.

    have looked the decryptor site – disabled now, tried telsadecrypter and not able to use any of the strategies in the above excellent article.

    does anyone else know what to do please. I am still searching the internet but I am running out of options. thanks d

    Reply

  2. Adrian
    December 11, 2015 @ 8:58 pm

    Is this thig real or an another way to get mallware?

    Reply

    • lakonst
      January 11, 2016 @ 11:54 am

      @Adrian: Yes is real…

      Reply

  3. AmerA
    January 2, 2015 @ 12:56 pm

    i tried ussing the decrypt cryptodefence tool but it says that no key was found… is there any solution to this ??

    Reply

    • lakonst
      January 3, 2015 @ 12:23 pm

      @Amera: I'm afraid not.

      Reply

  4. BummedOut
    November 17, 2014 @ 5:47 pm

    Do you think there will be an option to de-crypt the files using Emsisoft Decrypter utility if I wait for a new solution to be created?

    Reply

    • lakonst
      November 18, 2014 @ 11:05 am

      In the future…maybe yes.

      Reply

  5. Joel
    November 13, 2014 @ 2:16 am

    Does it make a difference if I only press Apply Actions and didn't press Quarantine all at all?

    Thanks

    Reply

    • lakonst
      November 14, 2014 @ 7:32 pm

      Hello Joel, If the selected action is Quarantine, doesn't make a difference.

      Reply

  6. Joseph
    August 27, 2014 @ 4:39 pm

    Hi there! On August 26, 2014 have been infected by the virus Trojan Win32 CryptoDefense / Harasom.A and despite having cleaned up my system I find myself with all the files and encrypted with the extension .ctb2. How do I restore it? I also tried restoring the configuration on another date but nothing.

    Pending thank you in advance

    Reply

    • lakonst
      August 31, 2014 @ 10:19 am

      Restore ONLY your files in previous versions as described in this article.

      Reply

Leave a Reply

Your email address will not be published. Required fields are marked *