This question already has an answer here:

The "new" kind of ransomware invade your computer and crypt all your files using the RSA-2048.

Personally, I have been victim of cryptodefense: 40000 files encrypted... I'm not going to pay anything to this &? but this is a big loss. I have a lot of files in both form: crypted and uncrypted (backup from 2011...)

Is there any chance to apply a known plain text attack on RSA-2048. I read another topic and it seems that if you have two files you miss a variable (e) but is there any way to find it with more than a thousand of files?

Does that means that this is a question of calculation capacity (in that case I'm gonna wait a couple of years to have my pictures back ;-)


marked as duplicate by e-sushi, archie, Maarten Bodewes, CodesInChaos, Gilles May 8 '14 at 17:36

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 4
    $\begingroup$ You have no chance if the malware has been implemented properly. $\endgroup$ – CodesInChaos May 7 '14 at 16:08
  • 3
    $\begingroup$ According to sources including this the malware is poorly implemented and leaves the key allowing decryption somewhere on the HD, enabling decryption, for infection before April 2014. CAUTION: attempt repair on a complete exact full backup of the HD, leave the original untouched! $\endgroup$ – fgrieu May 7 '14 at 16:37
  • $\begingroup$ It was exact before 1st april, but, the day that symantec publish this information, the pirats correct the problem the very same day and no more key on the HD... I have been invade the 14th april. If you are interested in, you can read the forum on bleeping computer : bleepingcomputer.com/forums/t/527937/… $\endgroup$ – Buche77 May 7 '14 at 16:53