Dharma Ransomware Using New File Extension [Mkgoro@india.com].xtbl and [Mkgoro@india.com].wallet - How to, Technology and PC Security Forum | SensorsTechForum.com
THREAT REMOVAL

Dharma Ransomware Using New File Extension [[email protected]].xtbl and [[email protected]].wallet

OFFER

SCAN YOUR PC
with SpyHunter

Scan Your System for Malicious Files
Note! Your computer might be affected by [[email protected]] and other threats.
Threats such as [[email protected]] may be persistent on your system. They tend to re-appear if not fully deleted. A malware removal tool like SpyHunter will help you to remove malicious programs, saving you the time and the struggle of tracking down numerous malicious files.
SpyHunter’s scanner is free but the paid version is needed to remove the malware threats. Read SpyHunter’s EULA and Privacy Policy

New Dharma ransom noteDharma ransomware virus has just been detected to append [[email protected]].wallet and [[email protected]].xtbl to encrypted files on victims’ computers.

Apparently, HTA ransom notes have been at rage lately as the well-known Dharma ransomware is now using them, according to malware researcher @PolarToffee on Twitter.

Dharma Ransomware Virus and Its Extensions – Overview

Dharma virus has gained power and fame in the past months due to being the new variant of the notorious CrySiS ransomware. Dharma uses the AES (Advanced Encryption Algorithm) to encrypt the victims’ files after which it asks the victim to pay a ransom in bitcoins in exchange for a decryption key.

Dharma has been reported to append different extensions to encrypted files. Those known by researchers are: .dharma, .wallet, [[email protected]], .zzzzz, and now the new [[email protected]].wallet and [[email protected]].xtbl.

With these new file extensions come a new ransom note and a new email to which victims are expected to write to in order to make arrangements with the cyber crooks. The new email is by no surprise [email protected] The ransom note looks like this:
New Dharma ransom note

…and it reads as it follows:

All your files have been encrypted!

All your files have been encrypted due to a security problem with your PC. If you want to restore them, write us to the e-mail [email protected]
You have to pay for decryption in Bitcoins. The price depends on how fast you write to us. After payment, we will send you the decryption tool that will decrypt all your files.

Free decryption as guarantee
Before paying you can send to us up to 3 files for free decryption. Please note that files must not contain valuable information and their total size must be less than 10Mb.

How to obtain BItcoins
The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click “Buy bitcoins”, and select the seller by payment method and price.

How to Remove [[email protected]] File Extension Virus and Restore My Data

In case your files have been encrypted and have received the [[email protected]] file extension, you have become a victim of Dharma ransomware. In this case, however, we urge you not to follow the instructions from the ransom note. You cannot trust cyber crooks who claim they will decrypt your data as soon as you make a payment. What’s more, paying the ransom to the cyber criminals only fosters cyber crime. Instead, follow the instructions below on how to get rid of the infection and see possible ways to restore some of your data via a powerful anti-malware tool.

Note! Your computer system may be affected by [[email protected]] and other threats.
Scan Your PC with SpyHunter
SpyHunter is a powerful malware removal tool designed to help users with in-depth system security analysis, detection and removal of threats such as [[email protected]].
Keep in mind, that SpyHunter’s scanner is only for malware detection. If SpyHunter detects malware on your PC, you will need to purchase SpyHunter’s malware removal tool to remove the malware threats. Read our SpyHunter 5 review. Click on the corresponding links to check SpyHunter’s EULA, Privacy Policy and Threat Assessment Criteria.

To remove [[email protected]] follow these steps:

1. Boot Your PC In Safe Mode to isolate and remove [[email protected]] files and objects
2. Find files created by [[email protected]] on your PC

Use SpyHunter to scan for malware and unwanted programs

3. Scan for malware and unwanted programs with SpyHunter Anti-Malware Tool
4. Try to Restore files encrypted by [[email protected]]
Boyana Peeva

Boyana Peeva

Believes that the glass is rather half-full and that nothing is bigger than the little things. Enjoys writing, reading and sharing content – information is power.

More Posts

Leave a Comment

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.

Share on Facebook Share
Loading...
Share on Twitter Tweet
Loading...
Share on Google Plus Share
Loading...
Share on Linkedin Share
Loading...
Share on Digg Share
Share on Reddit Share
Loading...
Share on Stumbleupon Share
Loading...