Subject | Recover database encrypted by trojan (Dharma) |
---|---|
Author | Volker Cordes |
Post date | 2018-06-06T19:35:56Z |
Hello,
a customer of ours got himself a trojan that led to his databases
(firebird 2.5) getting encrypted. I looked at the files with a text
editor and found that they do not look entirely encrypted. Most of the
files contains (human) readable text so that I think only the file
header has been encrypted because gfix won't recognise the file as a
valid database. Is there a chance that someone who knows the file format
could look at the files and see if there's a chance of getting the data
back?
Thanks,
Volker
--
Tel: +49 (0) 4489 408753
Fax: +49 (0) 4489 405735
mailto: vc@...
freeline Datentechnik GmbH & Co.KG
Wiekesch 1
26689 Apen
www.freeline-edv.de
Amtsgericht Oldenburg HRA 203347
persönlich haft. Gesellschafterin: freeline Holding GmbH, Amtsgericht Oldenburg HRB 206967
Geschäftsführer: Volker und Tobias Cordes
a customer of ours got himself a trojan that led to his databases
(firebird 2.5) getting encrypted. I looked at the files with a text
editor and found that they do not look entirely encrypted. Most of the
files contains (human) readable text so that I think only the file
header has been encrypted because gfix won't recognise the file as a
valid database. Is there a chance that someone who knows the file format
could look at the files and see if there's a chance of getting the data
back?
Thanks,
Volker
--
Tel: +49 (0) 4489 408753
Fax: +49 (0) 4489 405735
mailto: vc@...
freeline Datentechnik GmbH & Co.KG
Wiekesch 1
26689 Apen
www.freeline-edv.de
Amtsgericht Oldenburg HRA 203347
persönlich haft. Gesellschafterin: freeline Holding GmbH, Amtsgericht Oldenburg HRB 206967
Geschäftsführer: Volker und Tobias Cordes