Reply from BTC-e 

Дoбpый дeнь

Этoгo aдpeca y нac нeт.



good afternoon

It addresses we have.


 

I think there was a Vulnerability  in RDP at that time where the attacker was scanning possible open systems....

Hi all.

Just to share, we received the reply from the attacker as shown below.

Waiting for my brother to check and decrypt. I don't know if this works or not.



---------- Forwarded message ----------
From: Jack Williams <mushelps@gmail.com>
Date: 2015-11-07 18:12 GMT+03:00
Subject: Re: Fwd: Email
To:

Hello!

Do you have process in the memory called lsassw86s.exe ? If yes , kill process lsassw86s.exe first.
Also delete c:\windows\system32\lsassw86s.exe file.

Now you can run decrypt tool.

1st Decrypt password: 145C7C3F238B235F36C19125854FC9A77A6K7)CIAu4wCUBc407T2(E3B43vEQ4q8R9I1g5b7kB*9fDzE3EwEa1+8i5N4F8)Dt4v712QB=5d0q8i0k
2st Decrypt password: 21063857F60263D5921FFD2CB9B24E569(C54l6sDI9u1v4d7C2p7dA(BDCICSCv9FCl98744MEy8&BO7p7VASEo2@EXCODQCf619-DU6gCa4q9E0u
3st Decrypt password: quu*A**$$quu*V$uLFquu*V$uLF


Decryption tool (password for the archive: 123 ):

https://www.sendspace.com/file/ex2rs1

Download it and unpack to any folder. Also program require administrative rules (use administrator account).

Run decrypt.exe .

Copy paste 1st Decrypt password, 2st Decrypt password and 3st Decrypt passwords in decrypt tool 3 fields.

If you have not stop our software - use decryption tool, because the tool will stop our software before decrypting the files.

This is very important to stop our software service (and dont delete any files in ProgramData folder before stop) because your decrypted
files may will be encrypted again.

p.s. when you will start decrypt tool it would seem as if the program hanging, but everything is fine, just wait for the message about
successful completion of decrypting and dont touch decrypt window with your mouse.

If you have any questions or troubles in decrypting feel free to contact me .


Thank You!

Google did not reply yet for who or where is the location this person is sending us messages.

Hi all,

thanks for the replies. Unfortunately the backup drive was connected to the server and got encrypted. It is nit a virus but a person who logged using RDP according to hos answer when we asked how did he break in.

If we had time we would not pay and try to use other methods... but the need for accounting data made the decision to pay.
He was wrong and is feeling the mistake.....

This is for my brother.. who has noting to do with Bitcoins... He had to pay to get his business data. 

Bitstamp just confirmed that non of their users use this email address.... which most probably is for Multibit or something like that...

Has any one faced dealing with an attacker using: mushelps@gmaill.com ?



address:14LFQxeJwDWFAy4y9CvywauJ33idwDBDd6s for the attacker that demands ransom for encrypted data. His email:mushelps@gmail

http://justpaste.it/otzi

... or if someone can purchase and send to me and I'll pay him.

 Hi,

I'm looking for this product:

Sci Clair glasses cleaner (made in France) from (si-international.fr)

http://imgur.com/D8vqebd

I couldn't find a place to order it and it is not longer available locally.Can some one help in finding it ? at least from locations France ?

Thank you

Good news !

I sent this back and got a full refund. 

I found it is a lot cheaper in other places such Amazon.com. Possibly will not buy it. Not a reliable build as it seems....


Regards,,,

Is there another link to get a wallet client for Windows ?

وعليكم السلام و رحمة الله وبركاته

ما أدري كيف فاتني أشوف الموضوع لكن اشكر لك سؤالك.....

I worked with Lophie on he fist bitcoinArabia.com website but it was down for reasons out of our control....

Now Twitter account: @BitcoinArabia is still active.

There's also a WhatsApp group with 30+ members from Kuwait. Also, there was a meetup in Dubai two months ago, and anther is planned, I will update followers on Twitter with the account above. Interest is still low due to awareness.

I have a surprise that I hope to announce soon in the region

We need some sort of group to keep us all in the loop

 I re-resembled the thing as it it was very loose and it runs an I cal log in to the control panel.

I will try another power supply and check. The seller has replied back asking to remote log in. I'll see if they can help.

Regards,,,

Hi,

I recently purchased an ASIC Erupter cube eBay:
http://www.ebay.com/itm/271359712653?ssPageName=STRK:MEWNX:IT&_trksid=p3984.m1439.l2649

After connecting it to a power supply and jump starting, the ASIC status at the top of the page is showing all X

meaning dead. No O status at all. I contacted him for a replacement and waiting for reply...

It also arrived with loose pieces, I had to screw all heat sinks to the boards again and re-assemble the cube??!?!! Screws were falling inside the box !! 

Has any one faced this from this seller ?

Other solutions to double check ?

totally agree, we learned the hard way. We get paid off in 2 to 3 months in $ not in BTC.

If the hardware is not delivered the second day, don't buy.

I also will start preferring Mining contracts (that are alive and hashing).

Hi all

I managed to get this laptop in the US it's now in La Habra California.

Still for sale for btc.

PM for arrangements...

Thank you,

Thank you.  I saw a photo some where explaining the shorting.... I'll try to find a power supply.

I'm interested and watching.

Hi,

The 50GH unit I have is not working anymore. The lights are on, but no fans are running at all. Also, no response from BFL!! is there an alternative or some kind of universal power adapter ? I see the amps are very high (31A)!!!!

Can two (25GH) adapters work (possibly Xbox adapters....)?

Regards,,,

hello,

Any one here ?!