Our server It was infected with a Ransomeware called Merry X-mas the monday and it encrypted all files.
The files change the extension to .MERRY, for example compras.xls.MERRY.
And create a HTML Application called: I_LOVE_YOU_MERRY.HTA in each folder.
I tryed with the tool Emsisoft Decrypter for MRCR but doesn't work. The reason can be beacuse the Extension is different.
I contacted they by Telegram @comodosec and the programmer demands 2,000 Dollar of payment for the ransom.
They have the e-mail [email protected]
What can I do?
Thank you very much.