Posted 10 August 2018 - 06:21 AM
Hi. I have a big problem with a new JS / TrojanDownloader.Nemucod.EBG Ransomware that encrypts the files with extension .jse and 976kb. I have consulted online, but I have not found a solution to decrypt. I think it's a new variant of Nemucod. Does anyone have any information to help me?
ID Ransomware
SHA1: ab6833fd83c4eb77170b6159f66b2dc180eec272
There was no ransom note.
Tania (Málaga, Spain)
Thank you very much.
Edited by TaniaMLG, 10 August 2018 - 07:33 AM.
Ransomware Hunter
Posted 10 August 2018 - 08:47 AM
It's probably going to be impossible to identify without the ransom note or the malware itself. Do you have the malware? What is being detected as TrojanDownloader.Nemucod.EBG? Unfortunately, Nemucod is actually a downloader, so it isn't always delivering its own ransomware variant, and has been seen distributing other ransomwares.
ID Ransomware - Identify What Ransomware Encrypted Your Files [Support Topic]
RansomNoteCleaner - Remove Ransom Notes Left Behind [Support Topic]
CryptoSearch - Find Files Encrypted by Ransomware [Support Topic]
If I have helped you and you wish to support my ransomware fighting, you may support me here.
Posted 10 August 2018 - 10:38 AM
It's probably going to be impossible to identify without the ransom note or the malware itself. Do you have the malware? What is being detected as TrojanDownloader.Nemucod.EBG? Unfortunately, Nemucod is actually a downloader, so it isn't always delivering its own ransomware variant, and has been seen distributing other ransomwares.
Edited by TaniaMLG, 10 August 2018 - 10:41 AM.
0 members, 1 guests, 0 anonymous users
Back to top
