Press ctrl+c to copy the text from an error message.
No need to painstakingly copy it out into the Google search…
This works for all standard OS supplied message boxes.
e.g.
will copy as:
---------------------------
Error!!!
---------------------------
Error: 0xc000005. Access violation.
---------------------------
OK Cancel
---------------------------
This is free to distribute. I can’t find the source now for credit.
CUSTOM.zip
@Williamsburg sure it’s possible, and it shouldn’t be too difficult either.
I will speak about Mailgun because I am familiar with them, but it may be possible with other services also.
In Mailgun you route incoming email using “routes”. e.g. you can declare a route commanding mailgun to forward all mails who’s recipient address matches a certain regex to a certain email.
The routing mechanism is controllable through the web UI and also programatically via their API.
Their API documentation is clear and easy to understand.
Basically you will need to programatically create a new route whenever a listing is added. It can be achieved using a simple POST request.
@Knaper-Yaden why don’t you try this simple experiment:
run
"C:\Windows\SysWOW64\cmd.exe" /c echo ^%processor_architecture^%
on a 64bit machine…
@Chaim-Hirsch it depends how strong you would like the block to be.
To block only unsophisticated users it may be possible to use various weak methods such as a proxy that only allows certain urls, or a browser extension, or a dns resolver that only resolves certain domains.
http://www.angusj.com/pdftkb/ is a cute program that I used to use before I payed for a PDF editor.
@Williamsburg said in Dynamic Email routes:
it’s not needed as Mailgun will receive all email’s sent to my domain anyway
correct 
I think step 1 is to identify the ransomware strain. In this case it seems to be Rapid Ransomware (or some variant of it) based on the file extension and the note.
Does anyone know of a good company that can decrypt those files potentially? It’s quite critical…
I think you’re barking up the wrong tree. There seems to be a lot of information sharing within the community in the fight against ransomware, and if a decryption tool would exist, I think it would be freely available.
A quick Google search seems to suggest that there is no known weakness in the crypto of this particular ransomware.
Please note also that it is entirely possible using strong crypto to encrypt a file in a way that there is no feasible method to decrypt it using any known technology.
At this point I would channel my resources into other recovery methods.
Sorry for the bad news.
(Please do double check that there really isn’t any know weakness and that this really is Rapid Ransomware. https://www.nomoreransom.org/en/decryption-tools.html is a good resource, backed by some big anti-virus companies).
PDF Xchange Editor. The payed version. I highly recommend it as a cheap, lightweight, fast and friendly PDF editor. The customer support is also amazing.
It doesn’t (yet) do everything that Adobe Acrobat does, but it is very good value for money.
@Chocolate is there no way to add some RAM?
BTW 32 bit versions of the OS will use somewhat less RAM
I think step 1 is to identify the ransomware strain. In this case it seems to be Rapid Ransomware (or some variant of it) based on the file extension and the note.
Does anyone know of a good company that can decrypt those files potentially? It’s quite critical…
I think you’re barking up the wrong tree. There seems to be a lot of information sharing within the community in the fight against ransomware, and if a decryption tool would exist, I think it would be freely available.
A quick Google search seems to suggest that there is no known weakness in the crypto of this particular ransomware.
Please note also that it is entirely possible using strong crypto to encrypt a file in a way that there is no feasible method to decrypt it using any known technology.
At this point I would channel my resources into other recovery methods.
Sorry for the bad news.
(Please do double check that there really isn’t any know weakness and that this really is Rapid Ransomware. https://www.nomoreransom.org/en/decryption-tools.html is a good resource, backed by some big anti-virus companies).
read it as binary and translate to ascii characters
not sure what to do with the 4 bit words…
@Chocolate I don’t know. My point was that the fact that a Store App can do it doesn’t mean that anyone can do it.
@Chocolate said in Windows 10 in S Mode:
if you can do it through the store with a few clicks then there must be a way to outsmart it and trick Windows into believing that the same process that the store will do, that program should be able to do.
I don’t think your deduction is entirely correct
Store Apps are cryptographically signed by Microsoft and verified by the OS.
It is theoretically (barring a mistake on Microsoft’s part) close to impossible to create a program that spoofs that signature.
@Williamsburg said in Dynamic Email routes:
it’s not needed as Mailgun will receive all email’s sent to my domain anyway
correct
@Williamsburg sure it’s possible, and it shouldn’t be too difficult either.
I will speak about Mailgun because I am familiar with them, but it may be possible with other services also.
In Mailgun you route incoming email using “routes”. e.g. you can declare a route commanding mailgun to forward all mails who’s recipient address matches a certain regex to a certain email.
The routing mechanism is controllable through the web UI and also programatically via their API.
Their API documentation is clear and easy to understand.
Basically you will need to programatically create a new route whenever a listing is added. It can be achieved using a simple POST request.
I know a great guy looking for a programming job. He has a lot of programming know-how (including very advanced topics) but no major real-life programming experience.
He is willing to program in C++/JS/Haskell/Python/C# and would except lower than the market value for his work.
Contact me privately (the forum chat or email) for more info.
@Knaper-Yaden why don’t you try this simple experiment:
run
"C:\Windows\SysWOW64\cmd.exe" /c echo ^%processor_architecture^%
on a 64bit machine…