My brother in law is affected by the Cry36 encryption. Against all recommendations he payed the ransom. He then received a unlocker and a key. The problem is that the unlocker dosn't work properly.
If you start the unlocker, you have 2 possibilites. First "unlock all", second "unlock one". If you click on "unlock all" the unlocker says something like "please wait while the files are unlocked..." after some time the unlocker finishes with the message "congratulations... successful..." but no file is decrypted. If you click on "unlock one" a "open file" dialog appears where you can select one of the encrypted files. If a file is selected/opened a error message "Error extention file" appears.
The encrypted file extension is .nemesis
For me it seems that the unlocker is searching for another extension than the .nemesis extension. Would it be possible to find out what extension the unlocker is looking for? I already upacked the unlocker and examined some files with a HEX-editor but I am not very experienced with such stuff...
I can upload the unlocker and files later today...