Someone: Yeah i know that it deletes them...this is why the installer shows the drive as empty... No! It only encrypts the MFT (Master File Table) and you could connect the drive into another device and use softwares that find "deleted files" (but they are not actually deleted). If you dont undrestand how is possible to show the drive as empty and still have all of your files there just type "What Happens to Deleted Data as Fast As Possible".
Petya is the version with the skull anim and did actually allow you to recover. NotPetya, the one withOUT the skull anim, acts like ransomware but is really a wiper. it's been show that if you abort the fake chkdsk, you are safe. The fake chkdsk is what causes the bad stuff.
@RafaelMeeM it depends on when you short the chkdsk. Earlier = better, but if you backed up your encrypted files you're in luck because the official author released a decryptor. NotPetya and other pirated Petya's don't work however.
idk one time I aborted the fake chkdsk and it also encrypted my files, maybe I'll try again tomorrow, or maybe you are talking about NotPetya and not about Petya
NCS doesnt copyright music under its license, thats why its called Non-Copyrighted Music (NCS). And it doesnt matter if you put the credits of a song in the description because you'll still get claimed anyway if the license of the music is copyrighted, while for NCS music you'll never get claimed even if you don't put the credits.
@@AljoBerg It Just removes the master file table and stores It somewere i. The hdd so Windows does not know There are file in hdd, if you use a software to look There are actually files in here, or you Can use the decryptor
did you know the criminal behind the ransomware, Janus, released his private key? That means anyone that got a legit petya can get rid of the encryption. (red, green, or GoldenEye) (notpetya and petrwrap are hopeless, bc notpetya is a wiper, and petrwrap has rsa-2048, it's basically uncrackable).
You are misunderstanding. Petya only encrypt your Master File Table and your files are still there. NotPetya on the other hand will formats your drive and delete all of your system.
Mais dá pra recuperar, se vc tiver a chave que ele fala que tem w ter vc consegue voltar no Windows de novo, se ele destruísse o Windows ele não conseguiria fazer você poder acessar seus arquivos de volta, ou sei lá, ele deleta e recupera eles mesmo.
If you have laptop, bigger challenge is to throw your hard disk, if you don't know, just go to specialist, and when he throw the hard disk, then throw your laptop. That is how to make sure there is no ransomware anymore.
No. Petya only encrypt your Master File Table (MFT) and bricked your PC but your files are still there. But NotPetya will formats your drive and delete the whole system. I think you have some misunderstanding between Petya and NotPetya.
Oops my system crashed! I lost my deeta but I had an antivirus! Antivirus is not enough, you need protogent Worlds only antivirus with deeta recovery software. Think beyond antivirus, think protogent
In reality, petya just change the type of partition to one not recognized by Windows, theres some tools to generate the correct petya unlock key for having Windows again
But ur petya is fucking stupid beacuse u can delete virus by cmd its for expert but the 3rd and another petya u cant block it or u can use the cmd but its so hard matee
It doesn’t encrypt your files it gives you a epilepsy reaction
54 likesThe chkdsk screen looks legit. That's why it formatted so many PCs
41 likesPetya doesnt encrypt any of your files!
95 likesSomeone: Yeah i know that it deletes them...this is why the installer shows the drive as empty...
No! It only encrypts the MFT (Master File Table) and you could connect the drive into another device and use softwares that find "deleted files" (but they are not actually deleted). If you dont undrestand how is possible to show the drive as empty and still have all of your files there just type "What Happens to Deleted Data as Fast As Possible".
Replies (5)
Как
0 likes@@thmUNIX Suspect... haha, but is believable.
0 likesPedrooDeadPool No. I decrypted Petya with it. If you don't believe, you can start it in a virtual machine with disconnected network.
3 likesThis link have petya... hah
2 likesThere is a decryptor https://github.com/hasherezade/petya_key/releases/download/0.2/petya_key_v0.2_win32.zip
5 likesI was thinking the results would be only revealing that Petya only blocked your OS...
123 likesReplies (7)
@@itswilliamanimate Did you watch the video till the end? He tried it and the VM locked up when it tried to boot from the hard drive
0 likes@@itswilliamanimate kaspersky rescue disk and unblock OS
0 likesEither reinstall Windows or put nitroglycerin in your hard-drive and shoot it
0 likes@@itswilliamanimate nope.
1 likeBootrec /fixmbr
1 likeIt does
0 likessame
2 likesPetya is the version with the skull anim and did actually allow you to recover. NotPetya, the one withOUT the skull anim, acts like ransomware but is really a wiper. it's been show that if you abort the fake chkdsk, you are safe. The fake chkdsk is what causes the bad stuff.
19 likesReplies (2)
@RafaelMeeM it depends on when you short the chkdsk. Earlier = better, but if you backed up your encrypted files you're in luck because the official author released a decryptor. NotPetya and other pirated Petya's don't work however.
0 likesidk one time I aborted the fake chkdsk and it also encrypted my files, maybe I'll try again tomorrow, or maybe you are talking about NotPetya and not about Petya
0 likesMe: booting up my computer. my computer screen: wElCoMe tO pEtYa oS when are you gonna pay the ransom and get nothing back ?
45 likesReplies (1)
Sad
4 likesHey! Enderman you forget the intro!!!
33 likesReplies (3)
Sandesh
0 likes@@mintsushi9598 right
1 likeThis is an old vid
2 likesi showed this virus to my friend and he did some funky dance on the floor
12 likesReplies (3)
How to do that trick bro how do I do that
1 likeHold up
0 likeswooo yeeea
0 likesPeyta was never meant to encrypt your files
12 likesITS MEANT TO MAKE YOU EPILEPTIC
Replies (1)
@JELLYidk it encrypts the MFT(Master File Table), thats why it shows 0 bytes from 0 bytes
0 likesPet ya DOESNT rlly delete the entire c drive. It deletes the files that are used to boot. Without them you’ll just get a flashing cursor.
4 likesYeah... I knew what music you used in this video...
5 likesIt was this song: "it's different - Shadows (feat. Miss Mary)".
Honestly, Enderman, you should add description (if you got that song from NCS) into your older videos to prevent them from being copyright claimed.
Replies (1)
NCS doesnt copyright music under its license, thats why its called Non-Copyrighted Music (NCS). And it doesnt matter if you put the credits of a song in the description because you'll still get claimed anyway if the license of the music is copyrighted, while for NCS music you'll never get claimed even if you don't put the credits.
0 likes0:34 wait a minute virtualbox screen
3 likesReplies (1)
Bc it was chrismas new year
0 likesI wanna cry right now
5 likesReplies (2)
Good joke
1 likeLol
1 like0:45 this is a PETYA'S SIGN. It's formatting the drive!
3 likesReplies (4)
@@AljoBerg It Just removes the master file table and stores It somewere i. The hdd so Windows does not know There are file in hdd, if you use a software to look There are actually files in here, or you Can use the decryptor
0 likes@FireyGaming exactly ;-)
1 like@@vistaman1 yep why not
1 likenope
1 likePetya: get ready for the final blue screen!
1 likeWindows:nooo
Bluescreen:*reboots computer*
Windows:WTF
Replies (2)
SUPER BLUESCREEN
0 likes+Just Razvan Petya win Fattality
0 likesMusic Title:
2 likesIt Different - Shadows
did you know the criminal behind the ransomware, Janus, released his private key? That means anyone that got a legit petya can get rid of the encryption. (red, green, or GoldenEye) (notpetya and petrwrap are hopeless, bc notpetya is a wiper, and petrwrap has rsa-2048, it's basically uncrackable).
1 likeReplies (2)
@@blokos_ fixed that lmao
0 likesif you remove the brackets, youll say "that means anyone that got a legit petya."
0 likesthe short 0:34 bsod is c00000350 The transport determined that the remote system is down.
1 likeme: hey petya
7 likespetya: what
me: look this
me: ExPoSeD LOL
Petya formats the drive. If you go to repair your PC>notepad>file>open file then look at the system properties, you see 0 bytes free of 0 bytes
3 likesReplies (2)
You are misunderstanding. Petya only encrypt your Master File Table and your files are still there. NotPetya on the other hand will formats your drive and delete all of your system.
1 likePetya does not format the drive. It only encrypts the MFT.
1 likeand this is MBR and PartitionTable locker..
1 likeweird thing like why do petya doesn't encrypt your files they just overwirte your boot sector
0 likesА что не на VMware? Ты тоже на VirtualBox'е не можешь вм на весь экран увеличить (я не могу.)? Название песни??
2 likesit doesnt encrypts your files but its formats your disc -_-
1 likeMais dá pra recuperar, se vc tiver a chave que ele fala que tem w ter vc consegue voltar no Windows de novo, se ele destruísse o Windows ele não conseguiria fazer você poder acessar seus arquivos de volta, ou sei lá, ele deleta e recupera eles mesmo.
3 likesWhat is the background song
1 likeThis is channel is from Russua
10 likesReplies (10)
@@byluvix oh
0 likes@@sagxtar264 russia
0 likeswhere is Russua I really want to know
0 likesАче
0 likesRip spelling
0 likesTri poloski
0 likesR U S S U A
0 likesIzerPlays Thank smart man
0 likesyes it is
0 likesThank
0 likesIt doesn't encrypt your files
1 likeBut it formats your C:/ drive
And locks your computer (in which, you should find the key)
Replies (1)
It ENCRYPTS MFT
0 likesPetya only destroys all your data and resets your PC..
1 likePetya formats your hard drive. Proof:
1 like1. Open the fixing screen, open notepad and open the files. Disc C:’s properties - 0 bytes out of 0 bytes
2. Start repairing your OS (installing it) - the drive has only 40 GB.
3. You can’t go on safe mode.
Replies (1)
It encrypts MFT.
1 likeIf you have laptop, bigger challenge is to throw your hard disk, if you don't know, just go to specialist, and when he throw the hard disk, then throw your laptop. That is how to make sure there is no ransomware anymore.
0 likesDo i have new version of windows 7 or is virtual thing making it different
1 likeYoooo that is a nice VM start up theme.
0 likesNo one is gonna talk about the non-genuine copy of Windows and it have a background?
1 likeReplies (1)
You can set background when you have a non-genuine version of Windows 7, but it will disappear every time you restart your PC
0 likesPetya encrypt all system, the system can't run because the windows files encrypted
1 likeReplies (1)
Nooooo. IT ENCRYPTS THR MFT.
0 likesIf you enter valid key it will really start decrypting system.
0 likesi never seen you use virtualbox @Enderman XD
1 likeIf you entered the code of petya, the files will be discovered normally.
0 likes0:34 Okay, okay, um... Weird flex.
0 likesSTOP: c0000350 The transport determined that the remote system is down.
Don't let it even start with that fake chkdsk screen because it doesn't encrypt the files, but rather deletes or overwrites essential files.
0 likesNo, if you have program for decrypt code your files is backing up
0 likesNo opening animation...
1 likeHmmm....
Maybe petya has deleted the opening animation =[
Replies (2)
@@anic1716 and it's all because of petya's CHKDSK progress maybe.
0 likesNo, it encrypts the MFT so system could not find any bootable device
0 likesIf you reboot pc of "repairing sector" all your data loss (formated drive)
0 likeswait so I got petya and paid for a brand new pc when I could have used my Rufus
0 likesMy brother liked that virus too much, he is shaking on the floor right now
0 likesPetya.A doesnt encrypt your files,
0 likesit BLACKMAILS YOU
huh, the whole Petya ransomware is a total scam then
1 likeYay virtual box and enderman is giving us merry Christmas
0 likesThe Formatter
2 likesComing Soon 2020
Then how petya installs everything to back normal when put you correct code?
0 likesReplies (1)
Because petya encrypt the MFT (Master file table) and when you put the key, it desencrypt that
3 likesIt actually doesn't delete the system if with care
0 likesdoes anyone know what the music is? I'd love to know!
0 likesPetya Ransomwares Destroys all Files! Including your OS.
1 likeReplies (1)
No, It only encrypts the MFT
0 likesIt formats the entire drive so you cannot recover anyway
2 likesReplies (3)
No. Petya only encrypt your Master File Table (MFT) and bricked your PC but your files are still there.
0 likesBut NotPetya will formats your drive and delete the whole system.
I think you have some misunderstanding between Petya and NotPetya.
It only encrypts your MFT.
0 likesUnless you re-install.
0 likesStarting fom when u isert the disk its actually also how to fix memz toja
1 likewrong disk....
3 likeslol
Petya does not encrypt files all it does is format your c drive
0 likes1:15 Merry Christmas
0 likes1:48 emm... Petya deletes MBR and 2:30 if files encrypted, scanos cant find any os files
0 likesReplies (1)
Files are not encrypted. It will take several hours. It only encrypts the MFT, making the system unusuable
0 likesAh Virtual Box, I'm still using it.
0 likes2020?
2 likesWell that’s a BRUH moment
0 likesit formats the disk
0 likeswhat is this song on this video?
0 likesYou can actually remove petya with the help of some tutorials without losing your files
0 likesDon't blame me for sh*ting myself at 1:15
0 likesVirtual for kids 1:16 1:17 Petya wiLL kill us
1 likeReinstalling the OS will work then. (If you can figure out how to without deleting the entire C drive)
0 likesReplies (5)
Oh... Wait, can't you just restore an MBR backup (if you have one?)
0 likes@@starlii10 Yeah but for that you
0 likesWould probably want to get an AIO and use testdisk
You're right... and bootrec /fixmbr doesn't restore partition data...
0 likesyou would need to wipe the whole thing, mbr included. petya trashes your mbr and is iirc
0 likesyou can’t reinstall without deleting entire C drive
0 likesUse Petya Decryptor. It's good for you and won't brick your OS.
0 likesThe petya key is : pQfkv4PKLEfemAQL
0 likesReplies (2)
@Windows 10 ill buy you bc your master of all windows :D
0 likes@Windows 10 yeah, i`m used petya_KeyGenerator.
0 likesОн криптует не файлы, а только таблицу разделов
0 likesFLASHING LIGHTS WARNING - FLASHING LIGHTS WARNING
0 likesIt encrypted memz but I didn't do that. I knew that this is harmful for me. Haha. I'll try installing windows
1 like'system is no more starting"
0 likesTrick 500: Delete Petya with anover bootable System,
0 likesSIKE
So, a scareware?
0 likesUser name: Enderman
0 likesI love endermans!!
You're goddamn right.
1 likeIt wipes the hard drive and corrupts the MBR.
Replies (1)
It encrypts the MFT. And it might be a new kernel.
0 likesGuys u all just go ahead and download windows 2000 it have more anti virus then these new Windows Vista, 7 professional, 7 ultimate, 8, 8.1, 10, 11
0 likessomeone who has notpeya
0 likesDosent mean it
0 likespets ya
Petya.B Block Scarys you
0 likesName of music?
0 likesPETYA A EXPOSED
0 likesyou didn't recover the partition table
0 likesReplies (4)
@@itislucio same
0 likesYEEEEEEEEEEEES HE DID
0 likesduje225_Rebooted nope
0 likesHe did...
0 likesrare fotoage of Enderman not using VMware wokstaion pro😂
0 likesWhere is my download link
0 likesIt does encryt your files even it doesnt look like it does there is a tool to get a Key.I havent seen it on any english channel yet but on a german.
0 likesHow to you download win7?
0 likesWhen I ran Petya on my windows 7 virtual machine, it formatted everything, even the files. So Petya kills your files.
0 likesI got an antivirus ad ._.
0 likesReplies (1)
Oops my system crashed! I lost my deeta but I had an antivirus!
0 likesAntivirus is not enough, you need protogent
Worlds only antivirus with deeta recovery software.
Think beyond antivirus, think protogent
Excuse me i want the Petya
1 likeReplies (1)
🤭😂🤣😂😂
0 likescomrade
0 likesWindows 7 in old year 2009 petya dis yes found face
0 likesWhat‘s the Name of the Song?
0 likesReplies (1)
the song name is 'it's different shadows'
0 likesNo way!
1 likeTrojan petya (not ransomware) XD
0 likeswew..
0 likesя знал что эндермэн русский!!
0 likesuhhh the boot like
0 likesWhat is the song name
0 likesReplies (1)
Ines Aravena link for the Song
0 likeshttps://youtu.be/UHbDJ1oPuGo
Hi! I want to see a phone virus too
0 likesХороший контент,но почему названия видео на англ. яз.?
0 likesReplies (3)
привлекает большую аудиторию
0 likesАааа
0 likesRanplay 2.0 У него часть подписчиков это не русские.
1 likeHey Enderman you mean encrypt or decrypt
0 likesMyCleanPC?????? REALY????????
0 likesIn reality, petya just change the type of partition to one not recognized by Windows, theres some tools to generate the correct petya unlock key for having Windows again
0 likesTo whom that think this dose do formatting .You are corrent. The reson this "ransomeware" Beacuse. it Trash your Pc and other stuff.
0 likesReplies (1)
Fix your grammar
0 likesLol it just fried drive C: it is 0 bytes used of 0 bytes
0 likesReplies (1)
No, it deleted partition.
0 likesI have an ideja: Try memz on windows 2000 or 98
0 likesReplies (3)
AgentaSLO plays dont works
0 likesmemz oly works on windows xp, vista , 7 , 8 and 10
0 likesit doens't start
0 likeswrong drive.... not X:
0 likesReplies (1)
X: is in Windows the C: drive
0 likesАХАХАХАХХАХАХАХАХАХХ САМЫЙ ОПАСНЫЙ ВИРУС НАЗЫВАЕТСЯ
0 likesReplies (5)
Gleb Gamer 🤔. feedback.amigo.mail.ru
0 likesGAPPLEvlogs Channel А ты в курсе, что установщик амиго(даже без mail'а) с троянами)?))
0 likesGleb Gamer Ага. Никакие WannaCry, Пети и Криптолокеры не сравняться с Спутником Mail.ru, Яндекс.Баром и АМИГО...
0 likesGAPPLEvlogs Channel Петя по сравнению с ним ничто)
1 likeАМИГО САМЫЙ ОПАСНЫЙ ВИРУС НАЗЫВАЕТСЯ!!!!!
0 likesдай ссылку на вирус
0 likesError windows 7
0 likesWait u. Have WINDOWS 98 THEME
1 likeReplies (1)
No its not called windows 98 theme its called the windows classic theme
0 likesI installed this virus
0 likesI shit my pants.
0 likespassword
0 likeshey what is the password of the file
0 likesReplies (1)
mysubsarethebest
0 likesPassword and user
0 likesOh no 399 like
0 likesReplies (2)
@@theprololxd8965 okey :)
0 likesI am 400 like !!!!
0 likesА чё все комменты на английском))))
0 likesТы русский!
1 like{[LoL]}
0 likesТы не боишься, что твой комп может забрать кибер полиция?
0 likesReplies (1)
sorry for
1 likeТы русский!))
1 likeEasy virus! Lika
1 like????
0 likesAre you suRe..? And your like sian alam that try to removed petya
0 likes{OwO} [UwU]
0 likesAMK PETYA
0 likesты русский?
0 likes
0 likesxdYou are russian???
0 likesWtf⁉
0 likesPetya.A is not a ransomware
0 likesIt's a Wiper.
Lol why your real PC is russian?
0 likesReplies (1)
beacuse he is Russian
0 likesWell Basicly Petya Repairs Bad Sectors When That Screen Comes Quickly Shutdown Your PC (trust me petya repairs bad sectors)
0 likesEnglish YouTuber with russian system
0 likeswhat is the music name
0 likesYou a russia
0 likesstill waiting for Sanya virus
0 likesSiaaaaaaaaaaaaaaaaaammmmmm Allahmmmmmmmmmmmmmmmm
0 likes"MyCleanPC" Isnt that a scam?
0 likesLMAO when I was a kid and I would get the ransomware I would throw my pc outside and commit suicide because of the jumpscare
2 likesReplies (2)
Ahahahhahshshahs
0 likesAha ha HaHah Ha HA AHA hAHah ah aH ahA Ah ah a
0 likeslol
If you still had that vm the key would've been pQfkv4PKLEfemAQL
0 likesNo! It doesn't just delete system!!!! It encrypts MFT - Master File Table. Without correct MFT you can't boot. NotPetya really deletes all system but Petya of 2015 year encrypts it and you can recover them with decryptor. Here it is: https://github.com/hasherezade/petya_key/releases/download/0.2/petya_key_v0.2_win32.zip
3 likeshey enderman. I have a virus that you should test: windes 2
0 likeslink: https://mega.nz/#!P1cwVKLI!iP7JbAxsqpGDZX9Yk2Q0sZtExZd8QW1P2aKQjqxr_7o
0:36 it is fake CHKDISK isn't it
42 likesReplies (4)
yup
0 likes@@jejfcjsksksw1209 oh rip if its happened we know its attacks your data but creates fake CHKDISK
1 likeIt's actually destroy ur data instead save ur data if this happened to me, i will shut down the pc
3 likesOf course. Original checkdisk doesn't say that abort can cause any problems
12 likesIf u format ur disk u can stop that
0 likesBut ur petya is fucking stupid beacuse u can delete virus by cmd its for expert but the 3rd and another petya u cant block it or u can use the cmd but its so hard matee
https://www.virustotal.com/#/file/30bf40811e27e9de3fb2038fd7fa105f85206b225626c154818f666449eace69/detection
0 likesHow does it only show 1 detection? oof
petya.a is encrypt your files and you can decrypt https://www.youtube.com/watch?v=Xk2yvYv2_wY
0 likeswhaaat rename the fucking petya to petpig.To restore The data
0 likeshei bro please try my virus: https://mega.nz/#!YWQnSYoJ!wVe-OIsPQQIUTqhypuCpbdkDx4ighJ_BSwYLu0AF-Ig
0 likes