Cookie

Thank You for Your answer, i had an old copy of some files. But the diference between orginal and infected of my files is about 61bytes. It is not 68bytes and not 36bytes also I don't now where is the problem... Maybe it is another ransom?

Hello to all, I had infected my computer on 10 May 2017. The whole files was encrypted by filename.extension.xxxxxx.id_xxxxxx_fgb45ft3pqamyji7.onion. The ID Ransomware site identificate as CRY9 I had also test the decryptor from emsisoft but it says the fille must be 68bytes diffeerent. My example file is about 20MB and the different to crypted is 61bytes. Maybe i do something wrong - or it is not a CRY9? I have a backup but it's from several months ago. I don't now what to do now... Thank's for help and good Job in fight with hakers.