LeChiffre Ramsomware

[alrferreira 0]

I have a server infected with a ramsomware. ESET File Security has not detected the threat. He renamed spreadsheets (.xlsx) for the .LeChiffre extension.

Do you have any removal tool or recovery of files?

 

Thanks.

 

André L.R.Ferreira

[Maniac 2]

Hello André,

in this case ESET lab needs a few samples for sure. I recommend you to send them several of the infected files following these rules: How do I submit a virus, website or potential false positive sample to the ESET lab? .

Send them a link from this thread and explain them the whole situation and I believe they will create a solution.

[Flickwine 0]

I have this same issue on one of my workstations.  I have sent an example into ESET

[safety 8]

@Flickwine

Check whether the decoder will help

 

https://decrypter.emsisoft.com/lechiffre