sanjay mehta 6 Posted April 25, 2017 Share Posted April 25, 2017 have a win 7 SP1 system infected with following ransomware : file extensions appended with labels like .id_1662011887_2irbar3mjvbap6gt.onion.to._ exe files, documents, txt files are all affected. attached is a sample files compressed folder, containing few affected files, sysinspector report, and log collector data. password - infected. looking for help. sample files.zip Link to comment Share on other sites More sharing options...
itman 1,659 Posted April 25, 2017 Share Posted April 25, 2017 (edited) Check out this thread at bleepingcomputer.com : https://www.bleepingcomputer.com/forums/t/636865/nemesis-ransomware-support-help-topic/page-3?hl= onion Looks like a new version of Nemesis ransomware. Bleepingcomputer folks might be able to come up with a decrypter for it soon. If the ransomware encrypted .exe files is the system useable at all? -EDIT- You can also try to use the existing decryptor which might or might not work on the variant that nailed you. You can get instructions on use and download it from here: https://decrypter.emsisoft.com/cry9 Edited April 25, 2017 by itman Link to comment Share on other sites More sharing options...
Recommended Posts