How to decrypt .wallet files batman_good@aol.com - Ransomware attack

Hi I need your help, my computer was attached this morning.

Ransomware attack my computer files, By batman_good@aol.com, All my files are with extension .wallet

What program I need to use to back my files, all files are with extension .WALLET.

I don’t have backup activated on computer, didn’t notice that was off.

pleae advice :frowning: is there decryption program ?

Should I move all files to external drive and format - reinstall my computer ?

I just discover Free Ransomware Decryption Tools by AVAST, is there any tool I can use to solve this ??

This is email from them to me:

batman_good@aol.com
10:29 AM (9 hours ago)
to me
Decoding Files 1BTC(bitcoin) tomorrow 2BTC (bitcoin)
translation at the expense of Bitcoin
1g7e3QqeFoK5fiVHFMsewQmqMxy6Dxd1E
Buy Bitcoin here https://localbitcoins.com/buy_bitcoins
any other exchanger
or
write to Google how to buy Bitcoin in your country?
in order to guarantee the availability of our key
we can decrypt one file for free
the size of the files <1 mb, doc.docx.xls.xlsx.pdf.jpg.bmp.txt file format
other formats will not be free decryption
after payment we will send a decryption program

If there is a tool that can decrypt the files, you will find it here > https://www.nomoreransom.org/

If there is not tool there and you don’t have a clean backup of them, consider the files lost.

Whatever you do, DO NOT PAY THEM !

You have been infected by Crysis. We can help you! Good news!

Is the message i get when posting the above mail address at > https://www.nomoreransom.org/

Thanks, I will check that now.

I download the RakhniDecryptor from the link you send me

dont forget to read instructions first >> https://www.nomoreransom.org/uploads/RakhniDecryptor_how-to_guide.pdf

This ransomware is being constantly updated. Security researchers do their best to update the decryptors too. If anybody has any issues with using decryptors, you can also consult with dedicated ransowmare fighters at bleeping computer forum https://www.bleepingcomputer.com/forums/t/632389/dharma-ransomware-filenameemaildharmawalletzzzzz-support-topic/page-79?hl=%2Bwallet+%2Bsupport+%2Btopic#entry4223354 They follow all ransomware news and trends and really specialize on ransomware. Again, do not pay the ransom. Even if experts cannot recover your files now, leave files in safe place - maybe later you can get them decrypted as there are cases when malware authors release keys for free or researchers manage to finally find implementation flaws in ransomware code.

@ simonmikkelsen92
Please break the active link to hXXp://myspybot.com/wallet-file-virus/ as you say if it is a shady site then it shouldn’t be active.