by Alt » Thu Jan 29, 2015 1:07 pm
CTB Locker encrypts file content storing it in a new file with the same name and extension, and deletes the initial unencrypted file. To the date, there's no reliable decryption programs. R-Studio can be used to solve the case by finding the deleted initial file. Sometimes that helps, sometimes not. Depends mostly on the virus flavor.
The next R-Studio version will have some measures to find such deleted files. Should be released very soon.
CTB Locker encrypts file content storing it in a new file with the same name and extension, and deletes the initial unencrypted file. To the date, there's no reliable decryption programs. R-Studio can be used to solve the case by finding the deleted initial file. Sometimes that helps, sometimes not. Depends mostly on the virus flavor.
The next R-Studio version will have some measures to find such deleted files. Should be released very soon.