What is this ransomware? Help

Viruses and worms
1

My files are encrypted by ransomware. I don’t know what is it. I searched by ID ransomware & it can not be determined.
The file name changed to *.uzukgjjxp
Does anyone know it? Please help.

Below is the README text:

ALL YOUR DOCUMENTS PHOTOS DATABASES AND OTHER IMPORTANT FILES HAVE BEEN ENCRYPTED!

Your files are NOT damaged! Your files are modified only. This modification is reversible.

The only 1 way to decrypt your files is to receive the private key and decryption program.

Any attempts to restore your files with the third party software will be fatal for your files!

To receive the private key and decryption program follow the instructions below:

  1. Download “Tor Browser” from https://www.torproject.org/ and install it.

  2. In the “Tor Browser” open your personal page here:

http://um88888888888888aws.*********.onion/uzukgjjxp

Note! This page is available via “Tor Browser” only.

Also you can use temporary addresses on your personal page without using “Tor Browser”:

http://um88888888888888aws
http://um88888888888888aws
http://um88888888888888aws
http://um88888888888888aws

Note! These are temporary addresses! They will be available for a limited amount of time!

2

→ https://www.nomoreransom.org

Good luck.

3

The ransomware still can not be determined. I suppose it’s a new ransomware?!

4

This is My Decryptor Ransomware ( alias Magniber )

https://blog.malwarebytes.com/threat-analysis/2017/10/magniber-ransomware-exclusively-for-south-koreans/
https://blog.malwarebytes.com/threat-analysis/2018/07/magniber-ransomware-improves-expands-within-asia/

Decryptor >> https://www.bleepingcomputer.com/news/security/decrypters-for-some-versions-of-magniber-ransomware-released/

5

Thanks a lot. It seems to be the Magniber ransomware. It has the exact same My Decryptor page.
The decryptors do not have my file name (*.uzukgjjxp) yet. I think I need to wait for update. :cry: