If you are affected by this ransomware, consider not paying the ransom
Attention! Victims of the .harma ransomware [[email protected]]
Author: ok
Advertisements
Amcache and Shimcache in forensic analysis
Data from Amcache and Shimcache can provide a timeline of whether, what program was executed, when it was first launched and last modified.
Forensic Artifacts: proof of program execution on Windows systems
During forensic analysis of a Windows system, it is often important to understand, when and how a specific process was started.
Attention! Victims of the [email protected] ransomware
have you been affected by this ransomware version (1.6.id) to 03.07.19 don't pay the ransom.
Decrypting files after WannaCash ransomware (.punisher)
There is some good news, some versions of this ransomware can be decrypted.
Decoding some versions of Cryakl
After the attackers transferred private keys to us, it became possible to decrypt some versions of Cryakl
Specialists and Internet resources of the VIRUSNET ASSOCIATION
Current list of resources and users included in the Association.
Charter of the VIRUSNET Association
Non-profit voluntary
ASSOCIATION OF COMPUTER AND NETWORK SECURITY CONSULTANTS
Decrypting files after cryakl ver-CL 1.5.1.0
note: Transcription service is provided free of charge on a first-come, first-served basis..