NESA RANSOMWARE ATTACK

I have just been hit by the NESA ransomware virus and all my files now have the extension .nesa added on them. There is also a ReadMe file detailing the ransome amount and payment instructions.

How can I use Avast to decrypt my files?

Hi joevdaniels,

I´m just a forum member not from Avast Team but i will try to help with my experience on it field :wink:

So do you acess to internet ? Please go to https://www.nomoreransom.org/crypto-sheriff.php?lang=pt and upload a encrypted file to them, they will try to see what ransomware is this and help you to decrypt your files. They are the biggest and official Entities like Deutch Police Cybercrime unit, European Cybercrime Centre (EC3) from Europol, Kaspersky Lab e McAfee working together against Ransomware. So they are biggest help in this case.

PS: Don´t ever pay any ransomware!

Best Regards,

Hey mate,

You can also try https://id-ransomware.malwarehunterteam.com/and upload them file encrypted

You can also contact Avast support : https://support.avast.com/

Best Regards, :wink:

thanks a lot, guys.

i tried https://www.nomoreransom.org/crypto-sheriff.php?lang=pt but no luck…

Follow the instruction offered here,
https://forum.avast.com/index.php?topic=194892.0
Start your own topic in that forum and post the requested logs.