Results 1 to 10 of 10

Thread: kcvp ransomware

  1. #1
    Join Date
    Nov 2019
    Location
    Acquiring Signal
    Posts
    393
    Satfix Buxs
    1,694,259
    Thanks
    461
    Thanked 684x in 230 Posts
    Items Liontreasure chestDishTVYogurtTrophy 2Canada

    Default kcvp ransomware

    hello guys,

    friend got virus and his files are encrypted now to .kcvp

    any free software to decrypt files?

    he saved files and wiped everything but files he has are now encrypted.

    thanks in advance

  2. The Following User Says Thank You to Ryu For This Useful Post:


  3. #2
    Join Date
    Mar 2014
    Posts
    2,602
    Satfix Buxs
    1,751,429
    Thanks
    18,456
    Thanked 7,241x in 2,121 Posts
    Items BurgerA Beertreasure chestPresentRainbowRepWireless AccessTreasure

    Default

    This may help: hxxps://howtofix.guide/kcvp-virus-file/

    Also Here: hxxps://malwaretips.com/blogs/remove-kcvp-ransomware-virus/
    Last edited by auggie; 12-01-2022 at 02:52 AM.

  4. The Following 4 Users Say Thank You to auggie For This Useful Post:


  5. #3
    Join Date
    Mar 2014
    Posts
    2,602
    Satfix Buxs
    1,751,429
    Thanks
    18,456
    Thanked 7,241x in 2,121 Posts
    Items BurgerA Beertreasure chestPresentRainbowRepWireless AccessTreasure

    Default

    Emsisoft site Has a Free Decrytor Tool you can try on the encrypted files & have helpful info on it etc.

    from what I read if the files were locked with a Online Key, then you are Basically S.O.L. but with a offline key

    the Free tool may help ?

    This site explains it in Detail: hxxps://www.bleepingcomputer.com/forums/t/779582/need-help-for-stop-cadq-ransomeware-virus/
    Last edited by auggie; 12-01-2022 at 03:44 AM.

  6. The Following 2 Users Say Thank You to auggie For This Useful Post:


  7. #4
    Join Date
    Nov 2019
    Location
    Acquiring Signal
    Posts
    393
    Satfix Buxs
    1,694,259
    Thanks
    461
    Thanked 684x in 230 Posts
    Items Liontreasure chestDishTVYogurtTrophy 2Canada

    Default

    Quote Originally Posted by auggie View Post
    Emsisoft site Has a Free Decrytor Tool you can try on the encrypted files & have helpful info on it etc.

    from what I read if the files were locked with a Online Key, then you are Basically S.O.L. but with a offline key

    the Free tool may help ?

    This site explains it in Detail: hxxps://www.bleepingcomputer.com/forums/t/779582/need-help-for-stop-cadq-ransomeware-virus/
    yes that is what I found so far and not sure if they are online or offline. I will visit him over the weekend and will find out but was preparing in advance with softwares/tools I need.

    thanks so much bro

  8. The Following 3 Users Say Thank You to Ryu For This Useful Post:


  9. #5
    Join Date
    Mar 2014
    Posts
    2,602
    Satfix Buxs
    1,751,429
    Thanks
    18,456
    Thanked 7,241x in 2,121 Posts
    Items BurgerA Beertreasure chestPresentRainbowRepWireless AccessTreasure

    Default

    This is why I do Image Back-UPS to a external Drive not hooked up to my PC so that you can
    Nuke & Pave the infected Drive without having to start from Scratch/All Over.

  10. The Following 4 Users Say Thank You to auggie For This Useful Post:


  11. #6
    Join Date
    Dec 2015
    Posts
    6,330
    Satfix Buxs
    1,748,664
    Thanks
    21,482
    Thanked 27,017x in 5,704 Posts
    Items helicopter
Gift received at 12-23-2019, 06:22 PM from BluegrassJeep
Gift received at 12-23-2019, 06:22 PM from BluegrassCrown Royal
Gift received at 12-23-2019, 06:22 PM from BluegrassSome beer
Gift received at 12-23-2019, 06:22 PM from Bluegrasstreasure chest
Gift received at 12-23-2019, 05:52 PM from Bluegrass
Message: jejejeImmunity to Theft

    Default

    Agreed...I backup/restore to an unconnected drive.In the business world, true backups are kept off-site.

  12. The Following 2 Users Say Thank You to The Noof For This Useful Post:


  13. #7
    Join Date
    Oct 2009
    Posts
    9,002
    Satfix Buxs
    4,002,463
    Thanks
    3,657
    Thanked 8,660x in 3,245 Posts
    Items PhoneHeartVintage truck
Gift received at 12-23-2012, 09:06 AM from ICEMAN
Message: thank you budTVCoffee makerPinkfloydthe travel gnomeTractor

    Default

    This is why I subscribe to Malware bytes, (the multi PC paid version) if something gets by their stuff they fix it for me.
    ♫♫♫ I’m a lumberjack and I’m OK ♫♫♫ I drink all night and sleep all day. ♫♫♫



    Coming soon to a crop circle near you.....

    There is a 66 and third % chance that I'm on the right planet...

    "I'm happier then a Jackalope in a balloon factory"

    "First rule of testing satellites"
    "If its working fine now, then don't mess with it"

    "Second rule of testing satellites"
    "If you did mess with it, and now it doesn't work, can you blame someone else?"

    "Third rule of testing satellites"
    "If you did mess with it, and it doesn't work now, and you can't blame someone else"
    "Can you HIDE it"?

  14. The Following 3 Users Say Thank You to Terryl For This Useful Post:


  15. #8
    Join Date
    Nov 2019
    Location
    Acquiring Signal
    Posts
    393
    Satfix Buxs
    1,694,259
    Thanks
    461
    Thanked 684x in 230 Posts
    Items Liontreasure chestDishTVYogurtTrophy 2Canada

    Default

    Quote Originally Posted by auggie View Post
    This is why I do Image Back-UPS to a external Drive not hooked up to my PC so that you can
    Nuke & Pave the infected Drive without having to start from Scratch/All Over.
    that is what I told him and that is what I do for my own pc and any pc I repair make them complete back image once its done so easy for me to fix next time

  16. #9
    Join Date
    Nov 2019
    Location
    Acquiring Signal
    Posts
    393
    Satfix Buxs
    1,694,259
    Thanks
    461
    Thanked 684x in 230 Posts
    Items Liontreasure chestDishTVYogurtTrophy 2Canada

    Default

    so his files were locked with a Online Key.

    he learned his lesson

    thanks guys for your input :0

  17. The Following User Says Thank You to Ryu For This Useful Post:


  18. #10
    Join Date
    Sep 2012
    Posts
    123
    Satfix Buxs
    1,390
    Thanks
    1
    Thanked 24x in 21 Posts

    Default

    Yes I myself had this done a while back . I back up a lot of files and pics so only lost a few things. It is important to have external drive and back up files and folders. I tried many things no luck so just killed the drive then reinstalled Windows again just make sure to get you Key number from computer first. I used Kill Disk it is free to download and wipes drive did this twice then put Windows on then only started to put programs I used then slowly put stuff back on.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •