Eng Amr Adel
25-10-2015, 01:04
TeslaCrypt Ransomware. Virus .exx, .xyz, .zzz, .aaa, .abc or .ccc
extension appended to the end of the filename. The .aaa/.abc variant drops files (ransom notes) with names like Recovery_File_*****.html, Recovery_File_*****.txt, restore_files_*****.html, restore_files_*****.txt files, (where ***** are random characters) and pretends to be CryptoWall 3.0
A repository of all current knowledge regarding TeslaCrypt, Alpha Crypt and newer variants is provided by Grinler (http://www.bleepingcomputer.com/forums/u/3/grinler/) (aka Lawrence Abrams (http://www.bleepingcomputer.com/author/lawrence-abrams/)), in this topic: TeslaCrypt and Alpha Crypt Ransomware Information Guide and FAQ (http://www.bleepingcomputer.com/virus-removal/teslacrypt-alphacrypt-ransomware-information)
Information about and support for decrypting files affected by Alpha Crypt & TeslaCrypt ransomware can be found in this topic:
TeslaDecoder released to decrypt .EXX, .EZZ, .ECC files encrypted by TeslaCrypt (http://www.bleepingcomputer.com/forums/t/576600/tesladecoder-released-to-decrypt-exx-ezz-ecc-files-encrypted-by-teslacrypt/)
There is an ongoing discussion in this topic where you can post any questions or requests for assistance:
New TeslaCrypt version that uses the .EXX extension Support & Discussion (http://www.bleepingcomputer.com/forums/t/575875/new-teslacrypt-version-released-that-uses-the-exx-extension/)
extension appended to the end of the filename. The .aaa/.abc variant drops files (ransom notes) with names like Recovery_File_*****.html, Recovery_File_*****.txt, restore_files_*****.html, restore_files_*****.txt files, (where ***** are random characters) and pretends to be CryptoWall 3.0
A repository of all current knowledge regarding TeslaCrypt, Alpha Crypt and newer variants is provided by Grinler (http://www.bleepingcomputer.com/forums/u/3/grinler/) (aka Lawrence Abrams (http://www.bleepingcomputer.com/author/lawrence-abrams/)), in this topic: TeslaCrypt and Alpha Crypt Ransomware Information Guide and FAQ (http://www.bleepingcomputer.com/virus-removal/teslacrypt-alphacrypt-ransomware-information)
Information about and support for decrypting files affected by Alpha Crypt & TeslaCrypt ransomware can be found in this topic:
TeslaDecoder released to decrypt .EXX, .EZZ, .ECC files encrypted by TeslaCrypt (http://www.bleepingcomputer.com/forums/t/576600/tesladecoder-released-to-decrypt-exx-ezz-ecc-files-encrypted-by-teslacrypt/)
There is an ongoing discussion in this topic where you can post any questions or requests for assistance:
New TeslaCrypt version that uses the .EXX extension Support & Discussion (http://www.bleepingcomputer.com/forums/t/575875/new-teslacrypt-version-released-that-uses-the-exx-extension/)