Subject Recover database encrypted by trojan (Dharma)
Author Volker Cordes
Hello,

a customer of ours got himself a trojan that led to his databases
(firebird 2.5) getting encrypted. I looked at the files with a text
editor and found that they do not look entirely encrypted. Most of the
files contains (human) readable text so that I think only the file
header has been encrypted because gfix won't recognise the file as a
valid database. Is there a chance that someone who knows the file format
could look at the files and see if there's a chance of getting the data
back?

Thanks,
Volker

--
Tel: +49 (0) 4489 408753
Fax: +49 (0) 4489 405735
mailto: vc@...

freeline Datentechnik GmbH & Co.KG
Wiekesch 1
26689 Apen
www.freeline-edv.de

Amtsgericht Oldenburg HRA 203347
persönlich haft. Gesellschafterin: freeline Holding GmbH, Amtsgericht Oldenburg HRB 206967
Geschäftsführer: Volker und Tobias Cordes