As the title says, I got attacked at 2016 (I can't remember exact date). I was 16 years old with 0 english so I didn't understand anything from the ransom message it was saying Help Decrypt and some other stuff. I backed up my pictures/videos to a flash drive then I reinstalled windows. Now I want to decrypt my old files but only thing I know is all the files has mp3 extension. So if a file name was a.jpg , the attack made it a.jpg.mp3 . I researched a bit and found teslacrypt, and I used the below decryption tools:
esetteslacryptdecryptor
avast_decryptor_teslacrypt3
avg_decryptor_TeslaCrypt3
RansomwareFileDecryptor 1.0.1668 MUI
TeslaDecrypter
None of them helped. All of them removes mp3 extension, but when I try to open the jpg file I got a message saying "this file format may not be supported."(I translated it from my native lang so it might be a bit different). When I go to https://id-ransomware.malwarehunterteam.com/ and try to find out what is the ransom, it says
"
TeslaCrypt 3.0
This ransomware is decryptable!
Identified by
sample_extension: .mp3
sample_bytes: [0x00 - 0x30] 0x00000000000000008AC18DCE15952AFB0000000000000000
Click here for more information about TeslaCrypt 3.0
TeslaCrypt 4.0
This ransomware is decryptable!
Identified by
sample_extension: .mp3
sample_bytes: [0x00 - 0x30] 0x00000000000000008AC18DCE15952AFB0000000000000000
Click here for more information about TeslaCrypt 4.0
"
I don't know if sharing an encrypted file here is a good idea so I'm not sharing for now, but if someone wants, I can send a file for examination.
Can someone help me please