10.12.2015

MrMail has upgrade the MX Filter of .ZIP Files, to prevent TeslaCrypt and Alpha Crypt Ransomware

Version 8:

Encrypted File Exntesion: .vvv
Location of data file on disk: Not Used
Location of data file in registry: Not Used
Location of log file: Not Used
Data file protected: N/A
Decryption key offset: N/A
Info: This version doesn’t use any data files and decryption key is not stored on computer. There is not known way how to decrypt files without Tesla’s private key or a purchased decryption key.
Can be decrypted? Can only be decrypted if victim was able to capture the key being sent to the server at the time of encryption.