×
INTELLIGENT WORK FORUMS
FOR COMPUTER PROFESSIONALS

Log In

Come Join Us!

Are you a
Computer / IT professional?
Join Tek-Tips Forums!
  • Talk With Other Members
  • Be Notified Of Responses
    To Your Posts
  • Keyword Search
  • One-Click Access To Your
    Favorite Forums
  • Automated Signatures
    On Your Posts
  • Best Of All, It's Free!
  • Students Click Here

*Tek-Tips's functionality depends on members receiving e-mail. By joining you are opting in to receive e-mail.

Posting Guidelines

Promoting, selling, recruiting, coursework and thesis posting is forbidden.

Students Click Here

Encrypted files by Win32.Mabezat.A

Encrypted files by Win32.Mabezat.A

Encrypted files by Win32.Mabezat.A

(OP)
Hi
I can not open a file type docx, doc, xls, ppt, pdf because i got infected by Win32.Mabezat.
infection was on another machine, and after I got fired Mabezat one folder from the old machine on which there is give importantly, the problem is that I can not seem to open the files in the folder are recovered well after searching I found the cause of several site Mabezat encrypts files like doc, docx, xls ..... as is indicated on the site AVG:

Quote:

If the current system date matches the condition:
year greater or equal 2012, month greater
or equal 10 and day greater or equal 16,
files with the following extensions are encrypted:
*.TXT
*.BAS
*.C
*.MDB
*.ZIP
*.RAR
*.DOC
*.XLS
*.CPP
*.H
*.PAS
*.ASP
*.PHP
*.PPT
*.HTM
*.RTF
*.MDF
*.PSD
*.ASPX
*.ASPX.CS
*.HTML
*.PDF
*.HLP
The encryption consists simply of adding 0x10 to each byte of the file.
So please if anyone here can give me a solution to solve and backup my files by a tool or a script that can be able to decrypt it !
Thank you !

RE: Encrypted files by Win32.Mabezat.A

(OP)
OK Finally 2thumbsup,i found the solution to Decrypt Win32.Mabezat.A; So i would share it with you, may be this solution help somebody else thumbsup2
Here in a French Forum Thanks to the Author (sevyc64)
A Tool to Decrypt Mabezat DecryptMabezat.7z

Red Flag This Post

Please let us know here why this post is inappropriate. Reasons such as off-topic, duplicates, flames, illegal, vulgar, or students posting their homework.

Red Flag Submitted

Thank you for helping keep Tek-Tips Forums free from inappropriate posts.
The Tek-Tips staff will check this out and take appropriate action.

Reply To This Thread

Posting in the Tek-Tips forums is a member-only feature.

Click Here to join Tek-Tips and talk with other members! Already a Member? Login

Close Box

Join Tek-Tips® Today!

Join your peers on the Internet's largest technical computer professional community.
It's easy to join and it's free.

Here's Why Members Love Tek-Tips Forums:

Register now while it's still free!

Already a member? Close this window and log in.

Join Us             Close