Emsisoft Decrypter for Aurora

Aurora – сімейство вимагачів, які шифрують файли за допомогою XTEA і RSA, також може називатися “Zorro”, “Desu” або “AnimusLocker”. Відомі розширення включають “.Aurora”, “.aurora”, “.animus”, “.ONI”, “.Nano”, “.cryptoid” і “.peekaboo”.

Ось приклад тексту:

“==========================# zorro ransomware #==========================
SORRY! Your files are encrypted.
File contents are encrypted with random key.
Random key is encrypted with RSA public key (2048 bit).
We STRONGLY RECOMMEND you NOT to use any “decryption tools”.
These tools can damage your data, making recover IMPOSSIBLE.
Also we recommend you not to contact data recovery companies.
They will just contact us, buy the key and sell it to you at a higher price.
If you want to decrypt your files, you need to get the RSA-key from us.

To obtain an RSA-key, follow these steps in order:
1. pay this sum 500$ to this BTC-purse: 18sj1xr86c3YHK44Mj2AXAycEsT2QLUFac
2. write on the e-mail ochennado@tutanota.com or anastacialove21@mail.com indicating in the letter this ID-[id] and BTC-purse, from which paid.
In the reply letter you will receive an RSA-key and instructions on what to do next.
We guarantee you the recovery of files, if you do it right.
==========================# zorro ransomware #==========================”

Мануал по лікуванню від Aurora

# Блокировка site.ru RewriteEngine On RewriteBase / RewriteRule ^index\.php$ - [L] RewriteCond %{REQUEST_FILENAME} !-f RewriteCond %{REQUEST_FILENAME} !-d RewriteRule . /index.php [L] # END WordPress # # BEGIN Deny site.ru referrer RewriteCond %{HTTP_REFERER} site\.ru [NC] RewriteRule .* - [F] # END Deny site.ru referrer