Delivery-Date: Fri, 28 Aug 2015 05:21:33 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.1 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,T_DKIM_INVALID,T_RP_MATCHES_RCVD,UNPARSEABLE_RELAY
	autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id D7C661E0501;
	Fri, 28 Aug 2015 05:21:31 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id 0F7A336E7A;
	Fri, 28 Aug 2015 09:21:27 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id D91D636DAD
 for <tor-talk@lists.torproject.org>; Fri, 28 Aug 2015 09:21:22 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at 
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id 2ar_LctvaukW for <tor-talk@lists.torproject.org>;
 Fri, 28 Aug 2015 09:21:22 +0000 (UTC)
Received: from mx1.riseup.net (mx1.riseup.net [198.252.153.129])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client CN "*.riseup.net",
 Issuer "COMODO RSA Domain Validation Secure Server CA" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 96C1236CCC
 for <tor-talk@lists.torproject.org>; Fri, 28 Aug 2015 09:21:22 +0000 (UTC)
Received: from cotinga.riseup.net (unknown [10.0.1.161])
 (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits))
 (Client CN "*.riseup.net",
 Issuer "COMODO RSA Domain Validation Secure Server CA" (verified OK))
 by mx1.riseup.net (Postfix) with ESMTPS id AA23FC1F60;
 Fri, 28 Aug 2015 02:21:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=riseup.net; s=squak;
 t=1440753679; bh=4LNy2IzBoxK2BXfehLcWjH69N4nktpQT8b34+B9E/tc=;
 h=Subject:From:In-Reply-To:Date:Cc:References:To:From;
 b=Ym7w7lEV+L/miBMu+M1JZSB4RfB+S2A1dbpIqqXTTZeh9M+6QRRLPu/NVBRMpgNNF
 s9ZHxb0kFZ4k+yXxw2vtX1TP/xOiWAc80dfw70KVcXRRfK/JP93UNUlSMcLyhYfJcS
 deJ2FKYWupHF7Hrrr6v6yV+ic2lBexuUUL/n/cDo=
Received: from [127.0.0.1] (localhost [127.0.0.1])
 (Authenticated sender: kleft) with ESMTPSA id 01F671C008A
Mime-Version: 1.0 (1.0)
From: kleft@riseup.net
X-Mailer: iPhone Mail (12H143)
In-Reply-To: <CAKQkNYzCbRDFC+533-36o_4vnpnQq9+MyLhyEuDj---wN1bSMQ@mail.gmail.com>
Date: Fri, 28 Aug 2015 11:21:15 +0200
Message-Id: <615F426F-469C-4994-BE58-3ECEB9045A4D@riseup.net>
References: <CAKQkNYzCbRDFC+533-36o_4vnpnQq9+MyLhyEuDj---wN1bSMQ@mail.gmail.com>
To: "tor-talk@lists.torproject.org" <tor-talk@lists.torproject.org>
X-Virus-Scanned: clamav-milter 0.98.7 at mx1.riseup.net
X-Virus-Status: Clean
X-Content-Filtered-By: Mailman/MimeDel 2.1.15
Cc: "madi.said74@gmail.com" <madi.said74@gmail.com>
Subject: Re: [tor-talk] (no subject)
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

Hey Said,

You were injected by a virus called 'ransomware'. This software has encrypted your data using a private key which is only available through the attacker. Despite that you shouldn't pay money to anybody for decrypting your files or making the private key available to you. 

There are several methods available to 'clean' your computer, just google for 'CTB removal' but I recommend you to setup your computer with a clean and fresh install of your OS and restore your data from a backup.

The ransomware/ virus is not affiliated with or made by the Tor Project in any way. 

Regards,

Kleft 

> On 28 Aug 2015, at 08:24, SAID MADI <madi.said74@gmail.com> wrote:
> 
> 
> Please Almsaadh sooner that all the files are not open to me because I
> know no PDF files and Word and photos and a video message, but not in
> the form of image documents as follows:
> 
> what happend to your files
> all of your files protected by a strong encryption with RSA-2048 CAN
> BE FOUND Here
> what does this mean
> this meas that the structure and data within your files have been
> irrevocably changed, you will not be able to work with them read them
> or see them, it is the same thing as losing them forever, but with our
> help, you can restore them.
> how di this happen
> especially for you , on our server was generated the secret key pair
> RSA-2048 - public and private.
> All your files were encrypted with the public key, which has been
> transferred to your computer via the internet.
> decrypting of your files is only possible with the help of the private
> key and decrypt program, wich is on our secret server.
> What do i do
> alas; if you do do not take the necessary measures for the specified
> time then the conditions for obtaining the private key will be
> changed.
> if you really value your data, then we suggest you do not waste
> valuable time searching for other solutions because they do not exist.
> 
> for more specific instructions, please visit your personal home page,
> there are a few different addresses pointing to your page below:
> 
> 
> if for some reasons the addresses are not available , follow these steps:
> 1- download and install tor-browser :
> www.torproject.org/progects/torbroser.html.en
> 2- after a successful installation, run the browse and wait for initialization.
> 3-                 Type in the address bar
> 4- follow the instructins on the site.
> 
> 
> important information
> your personal page
> your personal page ( using TOR )
> your personal page code (if you open the site ( or TOR's ) directly )
> 
> 
> 
> I tried to find solutions and follow the steps but to no avail
> -- 
> tor-talk mailing list - tor-talk@lists.torproject.org
> To unsubscribe or change other settings go to
> https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

