Sign in to follow this  
majid

the Emsisoft Decrypter for Nemucod could not decrypt all files

Recommended Posts

Hi, My computer was infected and all .jpg .pdf, .docx and ... converted to .crypted with a decrypt text file on the desk top that is in following:

 

Quote

 

ATTENTION!

All your documents, photos, databases and other important personal files
were encrypted using strong RSA-1024 algorithm with a unique key.
To restore your files you have to pay 0.49677 BTC (bitcoins).
Please follow this manual:

1. Create Bitcoin wallet here:

      https://blockchain.info/wallet/new

2. Buy 0.49677 BTC with cash, using search here:

      https://localbitcoins.com/buy_bitcoins

3. Send 0.49677 BTC to this Bitcoin address:

      1NmgsxEwCWRwoYAWgiXG7HQevxyKBkrEkJ

4. Open one of the following links in your browser to download decryptor:

      http://westcoastcontest.com/counter/?a=1NmgsxEwCWRwoYAWgiXG7HQevxyKBkrEkJ
      http://zor.hu/counter/?a=1NmgsxEwCWRwoYAWgiXG7HQevxyKBkrEkJ
      http://creative-win.com/counter/?a=1NmgsxEwCWRwoYAWgiXG7HQevxyKBkrEkJ
      http://www.taxi1561.mk.ua/counter/?a=1NmgsxEwCWRwoYAWgiXG7HQevxyKBkrEkJ
      http://www.wizardforli.it/counter/?a=1NmgsxEwCWRwoYAWgiXG7HQevxyKBkrEkJ

5. Run decryptor to restore your files.

PLEASE REMEMBER:

      - If you do not pay in 3 days YOU LOOSE ALL YOUR FILES.
      - Nobody can help you except us.
      - It`s useless to reinstall Windows, update antivirus software, etc.
      - Your files can be decrypted only after you make payment.
      - You can find this manual on your desktop (DECRYPT.txt).

 


i run the "Emsisoft Decrypter for Nemucod" tool with two files and it has been work and regenerate all .crypted files but only about 1% of the files is correct and most of them does not open

please help me to return the files, please

B. regards

 

Share this post


Link to post
Share on other sites

Is it Nemucod, or NemucodAES? I recommend checking with ID Ransomware to be certain of what version we're dealing with. You can paste the link to the results at ID Ransomware into a reply for me to take a look at as well.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.