Phishing, not fishing:0) and as long as she didn't open the links, she should be fine, it's a threat and scare tactic. -----Original Message----- From: tmp-bounce@xxxxxxxxxxxxx [mailto:tmp-bounce@xxxxxxxxxxxxx] On Behalf Of Laz Sent: Tuesday, September 23, 2014 4:12 PM To: tmp@xxxxxxxxxxxxx Subject: [tmp] Re: here's what is says when I open the txt file No, not a fishing expedition at all. what you have there is a situation where you unknowingly picked up some beastie from the internet. They have locked your files and they want you to pay them something like $300 to have them unlock your files. I thought I heard recently that the government had caught up with these criminals, but my memory on it is vague. CJ, I suggest you get on a tech list and hopefully get some help from someone more knowledgable than me. HTH, Laz On 9/23/14, Carla Jo <carlajobratton@xxxxxxxxx> wrote: > That's what I thought, I won't click on any of these links, but it's > put itself all over my computer and has loaded on each folder of my players. > Lucky me > > > > From: tmp-bounce@xxxxxxxxxxxxx [mailto:tmp-bounce@xxxxxxxxxxxxx] On > Behalf Of Harris, Robert > Sent: Tuesday, September 23, 2014 4:02 PM > To: tmp@xxxxxxxxxxxxx > Subject: [tmp] Re: here's what is says when I open the txt file > > > > This looks like a Phishing virus my friend? > > > > Sorry it happened, probably from a site you visited (if I'm right). > > > > > > Bobby and prince > > > > From: tmp-bounce@xxxxxxxxxxxxx [mailto:tmp-bounce@xxxxxxxxxxxxx] On > Behalf Of Carla Jo > Sent: Tuesday, September 23, 2014 3:58 PM > To: rock box > Subject: [tmp] here's what is says when I open the txt file > > > > 752A77FB8139FB237069CB04550F64A4 > > > > What happened to your files ? > > All of your files were protected by a strong encryption with RSA-2048 > using CryptoWall. > > More information about the encryption keys using RSA-2048 can be found > here: > http://en.wikipedia.org/wiki/RSA_(cryptosystem) > > > > > > What does this mean ? > > This means that the structure and data within your files have been > irrevocably changed, you will not be able to work with them, read them > or see them, > > it is the same thing as losing them forever, but with our help, you > can restore them. > > > > > > How did this happen ? > > Especially for you, on our server was generated the secret key pair > RSA-2048 > - public and private. > > All your files were encrypted with the public key, which has been > transferred to your computer via the Internet. > > Decrypting of your files is only possible with the help of the private > key and decrypt program, which is on our secret server. > > > > > > What do I do ? > > Alas, if you do not take the necessary measures for the specified time > then the conditions for obtaining the private key will be changed. > > If you really value your data, then we suggest you do not waste > valuable time searching for other solutions because they do not exist. > > > > > > For more specific instructions, please visit your personal home page, > there are a few different addresses pointing to your page below: > > 1.https://kpai7ycr7jxqkilp.torminater.com/g8cd > > 2.https://kpai7ycr7jxqkilp.torchek.com/g8cd > > 3.https://kpai7ycr7jxqkilp.way2tor.com/g8cd > > > > If for some reasons the addresses are not available, follow these steps: > > 1.Download and install tor-browser: > http://www.torproject.org/projects/torbrowser.html.en > > 2.After a successful installation, run the browser and wait for > initialization. > > 3.Type in the address bar: kpai7ycr7jxqkilp.onion/g8cd > > 4.Follow the instructions on the site. > > > > > > IMPORTANT INFORMATION: > > Your personal page: https://kpai7ycr7jxqkilp.torminater.com/g8cd > > Your personal page (using TOR): kpai7ycr7jxqkilp.onion/g8cd > > -- Affordably priced Accessible Talking MP3 Players, Accessible phones, Bluetooth devices, and accessories http://www.talkingmp3players.com/ Email: laz@xxxxxxxxxxxxxxxxxxxxx Phone: 727-498-0121 Skype: lazmesa Personal Facebook: https://m.facebook.com/laz.mesa Facebook: https://m.facebook.com/Talkingmp3players?_rdr