It doesn’t encrypt your files it gives you a epilepsy reaction


The chkdsk screen looks legit. That's why it formatted so many PCs


Petya doesnt encrypt any of your files!

Someone: Yeah i know that it deletes them...this is why the installer shows the drive as empty...
No! It only encrypts the MFT (Master File Table) and you could connect the drive into another device and use softwares that find "deleted files" (but they are not actually deleted). If you dont undrestand how is possible to show the drive as empty and still have all of your files there just type "What Happens to Deleted Data as Fast As Possible".

There is a decryptor https://github.com/hasherezade/petya_key/releases/download/0.2/petya_key_v0.2_win32.zip

PedrooDeadPool No. I decrypted Petya with it. If you don't believe, you can start it in a virtual machine with disconnected network.

@@thmUNIX Suspect... haha, but is believable.


<b>I was thinking the results would be only revealing that Petya only blocked your OS...</b>

*I was thinking the results would be only revealing that Petya only blocked your OS...*

Either reinstall Windows or put nitroglycerin in your hard-drive and shoot it

@@itswilliamanimate kaspersky rescue disk and unblock OS

@@itswilliamanimate Did you watch the video till the end? He tried it and the VM locked up when it tried to boot from the hard drive


Petya is the version with the skull anim and did actually allow you to recover. NotPetya, the one withOUT the skull anim, acts like ransomware but is really a wiper. it's been show that if you abort the fake chkdsk, you are safe. The fake chkdsk is what causes the bad stuff.

idk one time I aborted the fake chkdsk and it also encrypted my files, maybe I'll try again tomorrow, or maybe you are talking about NotPetya and not about Petya

@RafaelMeeM  it depends on when you short the chkdsk. Earlier = better, but if you backed up your encrypted files you're in luck because the official author released a decryptor. NotPetya and other pirated Petya's don't work however.


Me: booting up my computer. my computer screen: wElCoMe tO pEtYa oS when are you gonna pay the ransom and  get nothing back ?


i showed this virus to my friend and he did some funky dance on the floor

How to do that trick bro how do I do that


Peyta was never meant to encrypt your files<br>ITS MEANT TO MAKE YOU EPILEPTIC

Peyta was never meant to encrypt your files
ITS MEANT TO MAKE YOU EPILEPTIC

@JELLYidk it encrypts the MFT(Master File Table), thats why it shows 0 bytes from 0 bytes


Pet ya DOESNT rlly delete the entire c drive. It deletes the files that are used to boot. Without them you’ll just get a flashing cursor.


Yeah... I knew what music you used in this video...

It was this song: "it's different - Shadows (feat. Miss Mary)".

Honestly, Enderman, you should add description (if you got that song from NCS) into your older videos to prevent them from being copyright claimed.

NCS doesnt copyright music under its license, thats why its called Non-Copyrighted Music (NCS). And it doesnt matter if you put the credits of a song in the description because you'll still get claimed anyway if the license of the music is copyrighted, while for NCS music you'll never get claimed even if you don't put the credits.


0:45 this is a PETYA'S SIGN. It's formatting the drive!

@@AljoBerg It Just removes the master file table and stores It somewere i. The hdd so Windows does not know There are file in hdd, if you use a software to look There are actually files in here, or you Can use the decryptor


Petya: get ready for the final blue screen!
Windows:nooo
Bluescreen:*reboots computer*
Windows:WTF


did you know the criminal behind the ransomware, Janus, released his private key? That means anyone that got a legit petya can get rid of the encryption. (red, green, or GoldenEye)  (notpetya and petrwrap are hopeless, bc notpetya is a wiper, and petrwrap has rsa-2048, it's basically uncrackable).

if you remove the brackets, youll say "that means anyone that got a legit petya."


the short 0:34 bsod is c00000350 The transport determined that the remote system is down.


me: hey petya
petya: what
me: look this
me: ExPoSeD LOL


Petya formats the drive. If you go to repair your PC>notepad>file>open file then look at the system properties, you see 0 bytes free of 0 bytes

Petya does not format the drive. It only encrypts the MFT.

You are misunderstanding. Petya only encrypt your Master File Table and your files are still there. NotPetya on the other hand will formats your drive and delete all of your system.


and this is MBR and PartitionTable locker..


weird thing like why do petya doesn't encrypt your files they just overwirte your boot sector


А что не на VMware? Ты тоже на VirtualBox'е не можешь вм на весь экран увеличить (я не могу.)? Название песни??


it doesnt encrypts your files but its formats your disc -_-


Mais dá pra recuperar, se vc tiver a chave que ele fala que tem w ter vc consegue voltar no Windows de novo, se ele destruísse o Windows ele não conseguiria fazer você poder acessar seus arquivos de volta, ou sei lá, ele deleta e recupera eles mesmo.


It doesn't encrypt your files
But it formats your C:/ drive
And locks your computer (in which, you should find the key)


Petya only destroys all your data and resets your PC..


Petya formats your hard drive. Proof:

1. Open the fixing screen, open notepad and open the files. Disc C:’s properties - 0 bytes out of 0 bytes

2. Start repairing your OS (installing it) - the drive has only 40 GB.

3. You can’t go on safe mode.


If you have laptop, bigger challenge is to throw your hard disk, if you don't know, just go to specialist, and when he throw the hard disk, then throw your laptop. That is how to make sure there is no ransomware anymore.


Do i have new version of windows 7 or is virtual thing making it different


No one is gonna talk about the non-genuine copy of Windows and it have a background?

You can set background when you have a non-genuine version of Windows 7, but it will disappear every time you restart your PC


Petya encrypt all system, the system can't run because the windows files encrypted


If you enter valid key it will really start decrypting system.


i never seen you use virtualbox @Enderman XD


If you entered the code of petya, the files will be discovered normally.


0:34 Okay, okay, um... Weird flex.

STOP: c0000350 The transport determined that the remote system is down.


Don't let it even start with that fake chkdsk screen because it doesn't encrypt the files, but rather deletes or overwrites essential files.


No, if you have program for decrypt code your files is backing up


No opening animation...
Hmmm....
Maybe petya has deleted the opening animation =[

No, it encrypts the MFT so system could not find any bootable device

@@anic1716 and it's all because of petya's CHKDSK progress maybe.


If you reboot pc of "repairing sector" all your data loss (formated drive)


wait so I got petya  and paid for a brand new pc when I could have used my Rufus


My brother liked that virus too much, he is shaking on the floor right now


Petya.A doesnt encrypt your files,<br>it BLACKMAILS YOU

Petya.A doesnt encrypt your files,
it BLACKMAILS YOU


huh, the whole Petya ransomware is a total scam then


Yay virtual box and enderman is giving us merry Christmas


Then how petya installs everything to back normal when put you correct code?

Because petya encrypt the MFT (Master file table) and when you put the key, it desencrypt that


It actually doesn't delete the system if with care


does anyone know what the music is? I'd love to know!


Petya Ransomwares Destroys all Files! Including your OS.


It formats the entire drive so you cannot recover anyway

No. Petya only encrypt your Master File Table (MFT) and bricked your PC but your files are still there.
But NotPetya will formats your drive and delete the whole system.
I think you have some misunderstanding between Petya and NotPetya.


Starting fom when u isert the disk its actually also how to fix memz toja


Petya does not encrypt files all it does is format your c drive


1:48 emm... Petya deletes MBR and 2:30 if files encrypted, scanos cant find any os files

Files are not encrypted. It will take several hours. It only encrypts the MFT, making the system unusuable


You can actually remove petya with the help of some tutorials without losing your files


Don't blame me for sh*ting myself at 1:15


Virtual for kids 1:16 1:17 Petya wiLL kill us


Reinstalling the OS will work then. (If you can figure out how to without deleting the entire C drive)

you can’t reinstall without deleting entire C drive

you would need to wipe the whole thing, mbr included. petya trashes your mbr and is iirc

You're right... and bootrec /fixmbr doesn't restore partition data...

@@starlii10 Yeah but for that you<br>Would probably want to get an AIO and use testdisk

@@starlii10 Yeah but for that you
Would probably want to get an AIO and use testdisk

Oh... Wait, can't you just restore an MBR backup (if you have one?)


Use Petya Decryptor. It's good for you and won't brick your OS.


@Windows 10 yeah, i`m used petya_KeyGenerator.

@Windows 10 ill buy you bc your master of all windows :D


Он криптует не файлы, а только таблицу разделов


FLASHING LIGHTS WARNING - FLASHING LIGHTS WARNING


It encrypted memz but I didn't do that. I knew that this is harmful for me.     Haha.  I'll try installing windows


Trick 500: Delete Petya with anover bootable System,

SIKE


You're goddamn right.<br>It wipes the hard drive and corrupts the MBR.

You're goddamn right.
It wipes the hard drive and corrupts the MBR.

It encrypts the MFT. And it might be a new kernel.


Guys u all just go ahead and download windows 2000 it have more anti virus then these new Windows Vista, 7 professional, 7 ultimate, 8, 8.1, 10, 11


@помойкаизвидео


rare fotoage of Enderman not using VMware wokstaion pro😂


It does encryt your files even it doesnt look like it does there is a tool to get a Key.I havent seen it on any english channel yet but on a german.


When I ran Petya on my windows 7 virtual machine, it formatted everything, even the files. So Petya kills your files.


Oops my system crashed! I lost my deeta but I had an antivirus!
Antivirus is not enough, you need protogent
Worlds only antivirus with deeta recovery software.
Think beyond antivirus, think protogent


Windows 7 in old year 2009 petya dis yes found face


the song name is 'it's different shadows'


я знал что эндермэн русский!!

я знал что эндермэн русский!!

@Ильяпро-у8ч


Ines Aravena link for the Song
https://youtu.be/UHbDJ1oPuGo


Хороший контент,но почему названия видео на англ. яз.?

Ranplay 2.0 У него часть подписчиков это не русские.

привлекает большую аудиторию

привлекает большую аудиторию


Hey Enderman you mean encrypt or decrypt


@АртемУстименко-о7ш


In reality, petya just change the type of partition to one not recognized by Windows, theres some tools to generate the correct petya unlock key for having Windows again


To whom that think this dose do formatting .You are corrent. The reson this "ransomeware" Beacuse. it Trash your  Pc and other stuff.


Lol it just fried drive C:    it is 0 bytes used of 0 bytes


I have an ideja: Try memz on windows 2000 or 98

memz oly works on windows xp, vista , 7 , 8 and 10


АХАХАХАХХАХАХАХАХАХХ САМЫЙ ОПАСНЫЙ ВИРУС НАЗЫВАЕТСЯ

АМИГО САМЫЙ ОПАСНЫЙ ВИРУС НАЗЫВАЕТСЯ!!!!!

GAPPLEvlogs Channel Петя по сравнению с ним ничто)

Gleb Gamer Ага. Никакие WannaCry, Пети и Криптолокеры не сравняться с Спутником Mail.ru, Яндекс.Баром и АМИГО...

GAPPLEvlogs Channel А ты в курсе, что установщик амиго(даже без mail'а) с троянами)?))


дай ссылку на вирус

дай ссылку на вирус


No its not called windows 98 theme its called the windows classic theme


А чё все комменты на английском))))

А чё все комменты на английском))))


Ты не боишься, что твой комп может забрать кибер полиция?


Ты русский!))

Ты русский!))


@СанькаВолков-з7й


Are you suRe..? And your like sian alam that try to removed petya


Petya.A is not a ransomware
It's a Wiper.

Petya.A is not a *ransomware*
It's a *Wiper.*


Well Basicly Petya Repairs Bad Sectors When That Screen Comes Quickly Shutdown Your PC (trust me petya repairs bad sectors)


LMAO when I was a kid and I would get the ransomware I would throw my pc outside and commit suicide because of the jumpscare

Aha ha HaHah Ha HA AHA hAHah ah aH ahA Ah ah a<br>lol

Aha ha HaHah Ha HA AHA hAHah ah aH ahA Ah ah a
lol


If you still had that vm the key would've been pQfkv4PKLEfemAQL


No! It doesn't just delete system!!!! It encrypts MFT - Master File Table. Without correct MFT you can't boot. NotPetya really deletes all system but Petya of 2015 year encrypts it and you can recover them with decryptor. Here it is: https://github.com/hasherezade/petya_key/releases/download/0.2/petya_key_v0.2_win32.zip


hey enderman. I have a virus that you should test: windes 2
link: https://mega.nz/#!P1cwVKLI!iP7JbAxsqpGDZX9Yk2Q0sZtExZd8QW1P2aKQjqxr_7o


Of course. Original checkdisk doesn't say that abort can cause any problems

It's actually destroy ur data instead save ur data if this happened to me, i will shut down the pc

@@jejfcjsksksw1209 oh rip if its happened we know its attacks your data but creates fake CHKDISK


If u format ur disk u can stop that

But ur petya is fucking stupid beacuse u can delete virus by cmd its for expert but the 3rd and another petya u cant block it or u can use the cmd but its so hard matee


https://www.virustotal.com/#/file/30bf40811e27e9de3fb2038fd7fa105f85206b225626c154818f666449eace69/detection

How does it only show 1 detection? oof


petya.a is encrypt your files and you can decrypt https://www.youtube.com/watch?v=Xk2yvYv2_wY


whaaat rename the fucking petya to petpig.To restore The data


hei bro please try my virus: https://mega.nz/#!YWQnSYoJ!wVe-OIsPQQIUTqhypuCpbdkDx4ighJ_BSwYLu0AF-Ig