Need help with a virus tales-from-the-crypt 2.0 - Msieve - Page 4

wombatman · 2015-12-31, 01:51

Quote:

Originally Posted by ichimarux

now i need help too

i try msieve but i cant run it :'(
i try db but its limit to 10M now i dont know how to finish this help me please

Software has encountered the following unknown AES keys, please crack them first
using msieve:

19E2F99524E38D59C02C863CE611979A7087E2A2A0287AF05A7340EA9B79D88202A2F1000AD0BE1A
C24B18A6C8744438C881624010893B01610386A7FC6F117D

Here: http://factordb.com/index.php?id=1100000000811425586

Quote:

Originally Posted by ichimarux

Alternatively, you can crack the following Bitcoin key(s) using msieve, and use
them with TeslaDecoder:

5839511E45235979BE6B43FDA5F8E202E7E349145EBCB7798958628B6A0CB9BB3E757C61206D04E7
6464D864F7741A73F65BF7F033343CDCA904B35DCE7DB219

And here: http://factordb.com/index.php?id=1100000000811434013

wombatman · 2015-12-31, 05:34

Quote:

Originally Posted by RaduR

Software has encountered the following unknown AES keys, please crack them first using msieve:
07A500ECF04FBE656EE66B7A4200F77ACCE375230D0EFACE84A5596C866CB2DD940334C8F1AA9394652E3774E5827D836C880A141DD957C8CE3220031D2AFE1C found in ./BISAD raport 11 07 2012.doc.vvv

This one is fully factored now: http://factordb.com/index.php?id=1100000000811977117

dearnizam · 2015-12-31, 06:47

Can anyone give me the factor for this

C:\Python27\TeslaCrack-master>python teslacrack.py .
Cannot decrypt ./FullStatement.xls.vvv, unknown key
Software has encountered the following unknown AES keys, please crack them first
using msieve:
15E7189BDB5B01F5F481EC77738F04983F39F10C622E29B0CEA2DD6FDE451CB92044CD0964E8FF1E
F07E880ECBC67365CEC8C334BB5D62E659FD663453EB270B found in ./FullStatement.xls.vv
v
Alternatively, you can crack the following Bitcoin key(s) using msieve, and use
them with TeslaDecoder:
113126C6F0EF0F0CB2AD384303AEAF20019E8C22C157CE5A4E27342A5C0FAED46FE21CA08BD44F7C
2A829053993D5514DBE169A56F67E8D31D8D6E73BCF51608 found in ./FullStatement.xls.vv
v

wombatman · 2015-12-31, 06:55

Take a whack at it yourself first: http://www.mersenneforum.org/showthread.php?t=20779

dearnizam · 2015-12-31, 08:01

I used yafu bit could'nt get the factor

C:\Python27\TeslaCrack-master>yafu-Win32.exe 0x113126C6F0EF0F0CB2AD384303AEAF200
19E8C22C157CE5A4E27342A5C0FAED46FE21CA08BD44F7C2A829053993D5514DBE169A56F67E8D31
D8D6E73BCF51608 -v -threads 4

12/31/15 11:17:27 v1.34.5 @ NIZAM-LAP, System/Build Info:
Using GMP-ECM 7.0-dev, Powered by MPIR 2.6.0
detected Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz
detected L1 = 32768 bytes, L2 = 3145728 bytes, CL = 64 bytes
measured cpu frequency ~= 2486.839270
using 20 random witnesses for Rabin-Miller PRP checks

===============================================================
======= Welcome to YAFU (Yet Another Factoring Utility) =======
======= bbuhrow@gmail.com =======
======= Type help at any time, or quit to quit =======
===============================================================
cached 78498 primes. pmax = 999983

>>
ans = 90041799349856957640057098112749424186176816980557864885710648346063816251
4392656985958579833707687603076434678988031466536383610127825525297594882135560

I used the factor number from factordb.com and below is the output.
C:\Python27\TeslaCrack-master>python unfactor-ecdsa.py FullStatement.xls.vvv 2 3
5 13 2221 259878893054228742077538121291949295726621229119932881024113209417286
66993222983900355539195606843983510443282622404768772913090953711816267146783113
1255484
No keys found, check your factors!

C:\Python27\TeslaCrack-master>python unfactor.py FullStatement.xls.vvv 2 3 5 13
2221 259878893054228742077538121291949295726621229119932881024113209417286669932
22983900355539195606843983510443282622404768772913090953711816267146783113125548
4

Dubslow · 2015-12-31, 08:03

That's because you need to read at least a bit of documentation about yafu. It doesn't suffice to pass the number, you must also tell yafu to run its "factor()" function on the number you pass.

dearnizam · 2015-12-31, 13:11

Can anyone please provide me the factor for

1147138487723616055341181346721756355830271446832482652766633883866739166038021035608107590424566428820213736507301543954900859575019734082965929533843211

Regards

wombatman · 2015-12-31, 13:35

http://factordb.com/index.php?id=1100000000811425586 is fully factored.

Nizam, try

Code:

yafu-Win32.exe "factor(0x113126C6F0EF0F0CB2AD384303AEAF20019E8C22C157CE5A4E27342A5C0FAED46FE21CA08BD44F7C2A829053993D5514DBE169A56F67E8D31D8D6E73BCF51608)" -v -threads 4

dearnizam · 2015-12-31, 13:41

Hi,

I tried this but it failed with below errors after running for few hours.

best poly:
# norm 2.006587e-013 alpha -4.827909 e 1.523e-008 rroots 4
n: 75491079362821263423280531086082120888062596488514812641848477608194575822932
7315552787734885598979
skew: 4246594.61
c0: 3560029111473298465050250987
c1: 4780020887771603525387
c2: -2788831600012765
c3: -704706569
c4: 60
Y0: -1883420694042279440544888
Y1: 16602113381087
nfs: commencing algebraic side lattice sieving over range: 885000 - 890000
nfs: commencing algebraic side lattice sieving over range: 880000 - 885000
nfs: commencing algebraic side lattice sieving over range: 870000 - 875000
nfs: commencing algebraic side lattice sieving over range: 875000 - 880000
'.\gnfs-lasieve4I12e_argfix.exe' is not recognized as an internal or external co
mmand,
operable program or batch file.
'.\gnfs-lasieve4I12e_argfix.exe' is not recognized as an internal or external co
mmand,
operable program or batch file.
'.\gnfs-lasieve4I12e_argfix.exe' is not recognized as an internal or external co
mmand,
operable program or batch file.
'.\gnfs-lasieve4I12e_argfix.exe' is not recognized as an internal or external co
mmand,
operable program or batch file.
nfs: could not open output file, possibly bad path to siever
nfs: could not open output file, possibly bad path to siever
nfs: could not open output file, possibly bad path to siever
nfs: could not open output file, possibly bad path to siever
fopen error: No such file or directory
could not open rels0.dat for reading

Regards

dearnizam · 2015-12-31, 14:03

Dear Wombatman,

Please help me, in getting this factors as im trying for this from last few days.

Regards
Nizam

Andi_HB · 2015-12-31, 14:13

Take a look in the sourcecode from factmsieve.py
looks like you haven`t the correct path to the binaries.
For example in line 60 you need to set the path to your ggnfs binaries.
# Set binary directory paths
GGNFS_PATH = 'D:/programme/faktorisierung/lasieve4_win/lasieve4_westmere/'
MSIEVE_PATH = 'D:/programme/faktorisierung/msieve/'

Regards Andi_HB

2015-12-31, 06:47	#36
dearnizam Dec 2015 2×5 Posts	Need help with a virus teslacrypt 2.0 - Msieve Can anyone give me the factor for this C:\Python27\TeslaCrack-master>python teslacrack.py . Cannot decrypt ./FullStatement.xls.vvv, unknown key Software has encountered the following unknown AES keys, please crack them first using msieve: 15E7189BDB5B01F5F481EC77738F04983F39F10C622E29B0CEA2DD6FDE451CB92044CD0964E8FF1E F07E880ECBC67365CEC8C334BB5D62E659FD663453EB270B found in ./FullStatement.xls.vv v Alternatively, you can crack the following Bitcoin key(s) using msieve, and use them with TeslaDecoder: 113126C6F0EF0F0CB2AD384303AEAF20019E8C22C157CE5A4E27342A5C0FAED46FE21CA08BD44F7C 2A829053993D5514DBE169A56F67E8D31D8D6E73BCF51608 found in ./FullStatement.xls.vv v

2015-12-31, 13:35	#41
wombatman I moo ablest echo power! May 2013 11011101001₂ Posts	http://factordb.com/index.php?id=1100000000811425586 is fully factored. Nizam, try Code: yafu-Win32.exe "factor(0x113126C6F0EF0F0CB2AD384303AEAF20019E8C22C157CE5A4E27342A5C0FAED46FE21CA08BD44F7C2A829053993D5514DBE169A56F67E8D31D8D6E73BCF51608)" -v -threads 4 Last fiddled with by wombatman on 2015-12-31 at 13:36

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Using msieve with c	burrobert	Msieve	9	2012-10-26 22:46
Yes: Tales from Typographic Oceans	xilman	Lounge	79	2012-05-26 23:53
msieve help	em99010pepe	Msieve	23	2009-09-27 16:13
95% sure I have a virus, please help	jasong	Hardware	8	2006-11-19 22:57
virus hardware damage?	TTn	Hardware	18	2006-11-04 09:41

2015-12-31, 06:55	#37
wombatman I moo ablest echo power! May 2013 29·61 Posts	Take a whack at it yourself first: http://www.mersenneforum.org/showthread.php?t=20779

2015-12-31, 08:01	#38
dearnizam Dec 2015 2×5 Posts	I used yafu bit could'nt get the factor C:\Python27\TeslaCrack-master>yafu-Win32.exe 0x113126C6F0EF0F0CB2AD384303AEAF200 19E8C22C157CE5A4E27342A5C0FAED46FE21CA08BD44F7C2A829053993D5514DBE169A56F67E8D31 D8D6E73BCF51608 -v -threads 4 12/31/15 11:17:27 v1.34.5 @ NIZAM-LAP, System/Build Info: Using GMP-ECM 7.0-dev, Powered by MPIR 2.6.0 detected Intel(R) Core(TM) i5-3210M CPU @ 2.50GHz detected L1 = 32768 bytes, L2 = 3145728 bytes, CL = 64 bytes measured cpu frequency ~= 2486.839270 using 20 random witnesses for Rabin-Miller PRP checks =============================================================== ======= Welcome to YAFU (Yet Another Factoring Utility) ======= ======= bbuhrow@gmail.com ======= ======= Type help at any time, or quit to quit ======= =============================================================== cached 78498 primes. pmax = 999983 >> ans = 90041799349856957640057098112749424186176816980557864885710648346063816251 4392656985958579833707687603076434678988031466536383610127825525297594882135560 I used the factor number from factordb.com and below is the output. C:\Python27\TeslaCrack-master>python unfactor-ecdsa.py FullStatement.xls.vvv 2 3 5 13 2221 259878893054228742077538121291949295726621229119932881024113209417286 66993222983900355539195606843983510443282622404768772913090953711816267146783113 1255484 No keys found, check your factors! C:\Python27\TeslaCrack-master>python unfactor.py FullStatement.xls.vvv 2 3 5 13 2221 259878893054228742077538121291949295726621229119932881024113209417286669932 22983900355539195606843983510443282622404768772913090953711816267146783113125548 4

2015-12-31, 08:03	#39
Dubslow Basketry That Evening! "Bunslow the Bold" Jun 2011 40<A<43 -89<O<-88 3·29·83 Posts	That's because you need to read at least a bit of documentation about yafu. It doesn't suffice to pass the number, you must also tell yafu to run its "factor()" function on the number you pass.

2015-12-31, 13:11	#40
dearnizam Dec 2015 2×5 Posts	Can anyone please provide me the factor for 1147138487723616055341181346721756355830271446832482652766633883866739166038021035608107590424566428820213736507301543954900859575019734082965929533843211 Regards

2015-12-31, 13:41	#42
dearnizam Dec 2015 10₁₀ Posts	Hi, I tried this but it failed with below errors after running for few hours. best poly: # norm 2.006587e-013 alpha -4.827909 e 1.523e-008 rroots 4 n: 75491079362821263423280531086082120888062596488514812641848477608194575822932 7315552787734885598979 skew: 4246594.61 c0: 3560029111473298465050250987 c1: 4780020887771603525387 c2: -2788831600012765 c3: -704706569 c4: 60 Y0: -1883420694042279440544888 Y1: 16602113381087 nfs: commencing algebraic side lattice sieving over range: 885000 - 890000 nfs: commencing algebraic side lattice sieving over range: 880000 - 885000 nfs: commencing algebraic side lattice sieving over range: 870000 - 875000 nfs: commencing algebraic side lattice sieving over range: 875000 - 880000 '.\gnfs-lasieve4I12e_argfix.exe' is not recognized as an internal or external co mmand, operable program or batch file. '.\gnfs-lasieve4I12e_argfix.exe' is not recognized as an internal or external co mmand, operable program or batch file. '.\gnfs-lasieve4I12e_argfix.exe' is not recognized as an internal or external co mmand, operable program or batch file. '.\gnfs-lasieve4I12e_argfix.exe' is not recognized as an internal or external co mmand, operable program or batch file. nfs: could not open output file, possibly bad path to siever nfs: could not open output file, possibly bad path to siever nfs: could not open output file, possibly bad path to siever nfs: could not open output file, possibly bad path to siever fopen error: No such file or directory could not open rels0.dat for reading Regards

2015-12-31, 14:03	#43
dearnizam Dec 2015 2·5 Posts	Dear Wombatman, Please help me, in getting this factors as im trying for this from last few days. Regards Nizam

2015-12-31, 14:13	#44
Andi_HB Mar 2007 Germany 410₈ Posts	Take a look in the sourcecode from factmsieve.py looks like you haven`t the correct path to the binaries. For example in line 60 you need to set the path to your ggnfs binaries. # Set binary directory paths GGNFS_PATH = 'D:/programme/faktorisierung/lasieve4_win/lasieve4_westmere/' MSIEVE_PATH = 'D:/programme/faktorisierung/msieve/' Regards Andi_HB