batman_good@aol.com
10:29 AM (9 hours ago)
to me
Decoding Files 1BTC(bitcoin) tomorrow 2BTC (bitcoin)
translation at the expense of Bitcoin
1g7e3QqeFoK5fiVHFMsewQmqMxy6Dxd1E
Buy Bitcoin here https://localbitcoins.com/buy_bitcoins
any other exchanger
or
write to Google how to buy Bitcoin in your country?
in order to guarantee the availability of our key
we can decrypt one file for free
the size of the files <1 mb, doc.docx.xls.xlsx.pdf.jpg.bmp.txt file format
other formats will not be free decryption
after payment we will send a decryption program
This ransomware is being constantly updated. Security researchers do their best to update the decryptors too. If anybody has any issues with using decryptors, you can also consult with dedicated ransowmare fighters at bleeping computer forum https://www.bleepingcomputer.com/forums/t/632389/dharma-ransomware-filenameemaildharmawalletzzzzz-support-topic/page-79?hl=%2Bwallet+%2Bsupport+%2Btopic#entry4223354 They follow all ransomware news and trends and really specialize on ransomware. Again, do not pay the ransom. Even if experts cannot recover your files now, leave files in safe place - maybe later you can get them decrypted as there are cases when malware authors release keys for free or researchers manage to finally find implementation flaws in ransomware code.
@ simonmikkelsen92
Please break the active link to hXXp://myspybot.com/wallet-file-virus/ as you say if it is a shady site then it shouldn’t be active.