Hi Recently, (yesterday morning), I was watching a stream on twitch tv. I had a popup stating "guide.exe has stopped responding". I reset the computer and then it still would not let me click on my icons etc saying they were not there or had been removed. I turned the computer off and still it was happening. Since then I have realised all my .exe files and .txt files have been encrypted and changed. There is a ransom .txt file in every directory etc. I have used the ID ransomeware site every few hours, but it cannot recognize the malware etc. I have downloaded and used decryption programs and they cannot find the key. Is there any where I can upload the infected file(s) and .txt ransome demands. The infected files have been encrypted and changed to [nintendonx(AT)qq(DOT)com after their original file name
The ransomeware. txt file (DECRYPTION.TXT) I will paste, but I will edit/adjust the links email so no one clicks on them (I will put them in bold font also).
All your files have been encrypted due to a security problem with your PC.
If you want to restore them, write us to the e-mail: nintendonx(at)qq(DOT)com
You have to pay for decryption in Bitcoins. The price depends on how fast you write to us.
After payment we will send you the decryption tool that will decrypt all your files.
FREE DECRYPTION AS GUARANTEE
Before paying you can send to us up to 3 files for free decryption.
Please note that files must NOT contain valuable information
and their total size must be less than 5Mb
How to obtain Bitcoins
The easiest way to buy bitcoin is LocalBitcoins site.
You have to register, click Buy bitcoins and select the seller
by payment method and price
Do not rename or move encrypted files - this may compromise the integrity of the decryption process
Do not try to decrypt your data using third party software, it may cause permanent data loss.
EDIT: This has nothing to do with twitch.tv Just what I was doing at the time when the malware proc'd itself.
Edited by Serverlord, 26 May 2017 - 09:55 AM.