ljs3508 0 Report post Posted December 27, 2019 My computer is infected with Ransomware. All files are suffixed with harma. The virus file is called shaofao.exe. The email left by the virus is whit[email protected] all File extension added .id-1A90EC8C.[[email protected]].harma ，for example：FileReading.exe.id-1A90EC8C.[[email protected]].harma，Original file is FileReading.exe How can I decrypt it. thanks! I have uploaded the file to dropfiles. https://dropmefiles.com/Mcqd1 shaofao.exe is here! https://dropmefiles.com/jv9n7 zip password:1 Download Image Quote Share this post Link to post Share on other sites
Kevin Zoll 306 Report post Posted December 27, 2019 Hello @ljs3508, Thank you for contacting Emsisoft Support. This is very likely DHARMA(CrySiS). Unfortunately, there is no way to decrypt your files using third-party tools. Quote Share this post Link to post Share on other sites
ljs3508 0 Report post Posted December 30, 2019 thank you! Quote Share this post Link to post Share on other sites
