Need help with a virus tales-from-the-crypt 2.0 - Msieve

[wombatman]

http://factordb.com/index.php?id=1100000000812101796

Looks like it should be able to factor pretty quickly. I'll take care of it.

[darkskysofrenia]

done :



but ... unfactor.py still (https://github.com/Googulator/TeslaCrack) no output :(

[wombatman]

Sorry, you'll have to ask Googulator about that

[hlopezdp]

Originally Posted by darkskysofrenia

done :



but ... unfactor.py still (https://github.com/Googulator/TeslaCrack) no output :(

Try using unfactor-ecdsa.py (remember to install python-ecdsa module). I never got output from unfactor.py :(

---

About Googulator's C134, it seems that somebody got it: http://factordb.com/index.php?id=1100000000811939811 so I'm going to stop YAFU in my server. (Yes, it is still sieving since then)

[jux]

Originally Posted by dearnizam

Hi Jux,

Thanks alot for help and your factor number has helped me to recover my files of D drive and when i tried to recover files of C drive this is coming with different public key.

Im trying to get factor for this.

Im very much thankfull to Wombatman,Jux and all the members of this group.

Regards
Nizamuddin

You're welcome! If you (or anyone) have any other numbers you need factoring, I would be happy to help. I don't have that powerful hardware but I can still get some results.

[dearnizam]

Hi Wombatman,

I was successfully recovered my other drive (C) also.
Thank you once again for all the members of this forum.

Regards
Nizamuddin

[darkskysofrenia]

effectively unfactor-ecdsa works on that one, it's output one key. I do that for a friend , it's the second computer i restore files , on the first one unfactor.py works good it's output me 3 or 4 keys.

[wombatman]

Originally Posted by dearnizam

Hi Wombatman,

I was successfully recovered my other drive (C) also.
Thank you once again for all the members of this forum.

Regards
Nizamuddin

Hooray! Glad everything worked out!

[Googulator]

Unfactor.py only works by default with pdf files, anything else requires changing the file magic number in the script.

[munozbasols]

Originally Posted by Googulator

Unfactor.py only works by default with pdf files, anything else requires changing the file magic number in the script.

Hi I tried for my infection your method but not works por pdf files.

Maybe i'm doing something wrong.

My file:
https://drive.google.com/open?id=0Bw...Td1dlRHVlVaUFk


1ºDone:
Run: python teslacrack.py .

10ACCB6406EB1FE0D93DCC2C5BBDACD8710A04DEB15520EEF1D4CFEDC2DFCA3895943154618918FE62DA23B722D5809C7AE170584FA8BE30267C1FAF516A5D40
found in ./PRENSA2.pdf.vvv
Alternatively, you can crack the following Bitcoin key(s) using msieve, and use
them with TeslaDecoder:
5A418C2F6DD510539255FDDFF6EA230CCBA15B0D044B400BFEBE9DE5B1D663F645BF81EEAFC8A51936947065D4DAACFB5EA0B7BC1B5ED6B17002C95DF69121A1
found in ./PRENSA2.pdfvvv

converto to decimal
Now factorizing....

2 2 2 2 2 2 3 5 5 5 29 59 103 151 2081 2039603 32217360122481615502589045613479955474752095446678609241111273219104696661995602407892730

Once factorized it run ecdsa
Run python unfactor-ecdsa.py



And shows no aes encryption key found :(

I'm doing something wrong?

[munozbasols]

Originally Posted by Googulator

Unfactor.py only works by default with pdf files, anything else requires changing the file magic number in the script.

I not works for me :( could you make a video :) please