COMBO FILE

Is there a "ransom" note? Sometimes it's better to just pay the bitcoin than lose everything. Especially if it's a small amount.

(09-10-2018, 06:30 PM)redspyder Wrote:

[To see links please register here]

Is there a "ransom" note? Sometimes it's better to just pay the bitcoin than lose everything. Especially if it's a small amount.

Morning redspyder. Sorry for late reply.
There is no Ransom note appear. Do you have any different method to solve it?

(09-07-2018, 11:19 AM)Bish0pQ Wrote:

[To see links please register here]

First of all are you 100% sure the ransomware is dharma? Since that means it's based on the Crysis malware, and they already found master decryption keys for that Malware. I'm not sure if I'm too late and you deleted everything already but you could try this.

Apperently Kapersky has made a program that will (slowly, can take days) decrypt your encrypted files, if the malware is a known variant. You can download and try out the decryptor here:

[To see links please register here]

There is also a master key file (C header file), which you can use to try and decrypt your files, not sure how that works though, but you can find the master key

Hi Bish0pQ, sorry for late reply. Im in holiday now.
Regarding the decryptor you tell me, it say unsupported format for my combo file.
Are you have any other method to solve it?
Tq.

(09-12-2018, 02:50 AM)Kazuki Araya Wrote:

[To see links please register here]

(09-07-2018, 11:19 AM)Bish0pQ Wrote:

[To see links please register here]

First of all are you 100% sure the ransomware is dharma? Since that means it's based on the Crysis malware, and they already found master decryption keys for that Malware. I'm not sure if I'm too late and you deleted everything already but you could try this.

Apperently Kapersky has made a program that will (slowly, can take days) decrypt your encrypted files, if the malware is a known variant. You can download and try out the decryptor here:

[To see links please register here]

There is also a master key file (C header file), which you can use to try and decrypt your files, not sure how that works though, but you can find the master key

Hi Bish0pQ, sorry for late reply. Im in holiday now.
Regarding the decryptor you tell me, it say unsupported format for my combo file.
Are you have any other method to solve it?
Tq. :smile:

I might have missed this, but do you have any backups?

[To see links please register here]

[To see links please register here]

[To see links please register here]

(09-12-2018, 03:34 PM)redspyder Wrote:

[To see links please register here]

(09-12-2018, 02:50 AM)Kazuki Araya Wrote:

[To see links please register here]

(09-07-2018, 11:19 AM)Bish0pQ Wrote:

[To see links please register here]

First of all are you 100% sure the ransomware is dharma? Since that means it's based on the Crysis malware, and they already found master decryption keys for that Malware. I'm not sure if I'm too late and you deleted everything already but you could try this.

Apperently Kapersky has made a program that will (slowly, can take days) decrypt your encrypted files, if the malware is a known variant. You can download and try out the decryptor here:

[To see links please register here]

There is also a master key file (C header file), which you can use to try and decrypt your files, not sure how that works though, but you can find the master key

Hi Bish0pQ, sorry for late reply. Im in holiday now.
Regarding the decryptor you tell me, it say unsupported format for my combo file.
Are you have any other method to solve it?
Tq. :smile:

I might have missed this, but do you have any backups?

No. We dont have the backup.

(10-09-2018, 12:26 PM)shozab Wrote:

[To see links please register here]

[To see links please register here]

[To see links please register here]

[To see links please register here]

is it full installer package with crack version ?

Hello everyone.
Once again our server pc and backup server pc being attack by the id-2A1D302C.[[email protected]].combo.
Looks like it attack pattern is at midnight.
What a shame :sad: , i still cant do anything to prevent it from happen.
May i know, what is the possible cause this ransomware can enter our server although our server and backup server pc guard by Kapersky antivirus?