Ransomware - [email protected] - Nemesis decryptor

[Alex2k17 0]

Hi everyone,

I have bad news again!

Got attecked by a new kind of ransomware.

 

This is the message of the hacker:

*** ALL YOUR WORK AND PERSONAL FILES HAVE BEEN ENCRYPTED ***

To decrypt your files you need to buy the special software – «Nemesis decryptor»
You can find out the details / buy decryptor + key / ask questions by email: [email protected]

Your personal ID: 3483880938

I have attached the .txt-file the hacker left, a encryptet file and the decryptet file, the hacker send me back to show me that he can decrypt.
Is there any chance to get my files back? I read that ist would be a Kind of CryptOn ransomware and I should try to use your decryptor but there is alway a error message when I try to decrypt.

 

Thanks everyone!

### DECRYPT MY FILES ###.txt

Logo.jpg.id-3483880938_[[email protected]].iu21j

Download Image

ransomware.rar

[Steve McCoy 0]

Did you ever get anywhere with this issue?

One of our servers has been hit

 

[Amigo-A 60]

It's almost one-in-one the same thing that in the next topic. Just with another email.
This crypto-extortionist is called Cry36. This name he received here, in this forum. There are several topics with the same problem and of the same Ransomware, but main one, as I understand it, is this one. 

[Demonslay335 16]

Yes, if you uploaded the encrypted file to ID Ransomware, it will tell you it is Cry36 based on the filemarker. Afraid it cannot be decrypted, you'll have to restore from backups.

[Anthony Lawlor 0]

On 10/06/2017 at 2:17 AM, Demonslay335 said:

Yes, if you uploaded the encrypted file to ID Ransomware, it will tell you it is Cry36 based on the filemarker. Afraid it cannot be decrypted, you'll have to restore from backups.

Hi Demonslay335, 

Is Cry36 encryption something in the foreseeable future to have a decrypter?