Tesla Crypt 3.0

Viruses and worms
1

Last week my PC was infected by the well known TeslaCrypt-Trojan - but with version 3, which checks all volumes on my PC for “.jpg” and all Windows-Office 365-files, encrypting these files and adding an “.mircro”-ending. In my case for example a data-SSD with about 10.000 pictures in JPEG and RAW-Format was encrypted, so the files no longer can be used.

The “funny” thing about this: this infection occured even the total AVAST-Suite was installed and full operational…

Therefore: is AVAST working on a decrypt-software to make encrypted files usable again?

Anyway: even NORTON and AVG did not mention anything to solve the problem with TeslaCrypt-Trojan-destroyed files…

2
The "funny" thing about this: this infection occured even the total AVAST-Suite was installed and full operational.......
[b]NO[/b] security program have 100% detection or zero false positives

The malware world is not static, malware writers constantly change or create new versions to avoid detection

Best solution is BACKUP, BACKUP, BACKUP :wink:

3

We can help you remove the malware here … but your files are gone :cry:

Follow instructions here and you get assistanse >> https://forum.avast.com/index.php?topic=53253.0

4

What is the extension of your encrypted files?

5

Have a closer look to my posting and you will find the answer.

6

My personal problem with the about 10.000 corrupted files is solved: what I forgot was the fact, I made two backups in the nearer past, one on my NAS (Fritz!Box), one on a blue-ray-disk. So most of my pictures are saved well.

But the bad thing is: the TeslaCrypt-3.0 does NOT change it’s appearance to hide and unfortuneately the AVAST-Suite failed to protect my PC from beeing infected.

Therefore the AVAST-producers should care for a decrypting-tool of this special encrypted files.

7

avast is currently working on a detection tool for it.

8

still waiting for the requested logs if you want help removing it