Jump to content

Smok3d

Member
  • Posts

    4
  • Joined

  • Last visited

Posts posted by Smok3d

  1. 12 hours ago, Fabian Wosar said:

    It has nothing to do with the Windows version. Nemesis is a ransomware-as-a-service offer, that means everyone can subscribe to it and get their own ransomware. Kaspersky only liberated the required keys for some of the Nemesis partners. That means only campaigns associated with those partners can be decrypted.

    Ruben-e on bleeping Computer forum posted and had the same extension as I did (830s7). The decryptor worked for him but not me? Wouldn't the same extension be apart of the same campaign?

  2. Hi,

    I am trying to figure out what encryption this ransomware is using......
    ID Ransomware says it is a dharma variant I cannot get either decryter to work. Thought it may be an Amnesia variant but that does not work either.

    Has the 830s7 extension. Ransom note:

    See what you can find out about this virus
    ... * ALL YOUR WORK AND PERSONAL FILES HAVE BEEN ENCRYPTED *
    To decrypt your files you need to buy the special software – «Nemesis decryptor»
    You can find out the details / buy decryptor + key / ask questions by email: [email protected]
     
    Any help would be much appreciated.
     
    EDIT: I am told it is CryptON variant but the decrypter gives error with file pair.
     
    Cheers
×
×
  • Create New...