Trojan koeserg@gmail.com WORKING FIX

Heya,
We got this Encoder-trojan infecting some user shares on our file server yesterday.
I sent a request to drweb.com with the trojan-file and a couple .EnCiPhErEd files.

Today i got the answer from drweb with the solution:

Vladimir Martyanov via RT <vms@drweb.com>

Download this program ftp://ftp.drweb.com/pub/drweb/tools/te94decrypt.exe and start it with command line parameters -k 85

It will decrypt files.




We're running the program on our server as we speak, and it is decrypting files very fast, successfully.

So for anyone with this problem, try this to get your files back!


//Alex

 

Hello postkasse,

Thank you for sharing your solution with others