(08-28-2018, 05:24 AM)mothered Wrote: I assume your PC has been Infected by the ransomware, and every file has been encrypted with an appended extension of .cmb?

(08-28-2018, 10:12 AM)Kazuki Araya Wrote:

(08-28-2018, 05:24 AM)mothered Wrote: I assume your PC has been Infected by the ransomware, and every file has been encrypted with an appended extension of .cmb?

This is the extension look like [kingdata@cock.li].combo

(08-28-2018, 11:07 AM)mothered Wrote:

(08-28-2018, 10:12 AM)Kazuki Araya Wrote:

(08-28-2018, 05:24 AM)mothered Wrote: I assume your PC has been Infected by the ransomware, and every file has been encrypted with an appended extension of .cmb?

This is the extension look like [kingdata@cock.li].combo

The first part Is the email address typical with ransomware (In general), that denotes the payment gateway for the end user.

If It's the latest Dharma Ransomware, It will have a .cmb extension which your example doesn't appear to be as such. Is every file on the PC encrypted?

(08-29-2018, 01:52 AM)Kazuki Araya Wrote:

(08-28-2018, 11:07 AM)mothered Wrote:

(08-28-2018, 10:12 AM)Kazuki Araya Wrote: This is the extension look like [kingdata@cock.li].combo

The first part Is the email address typical with ransomware (In general), that denotes the payment gateway for the end user.

If It's the latest Dharma Ransomware, It will have a .cmb extension which your example doesn't appear to be as such. Is every file on the PC encrypted?

Yes . All file in PC is encrypted. Cant be open.

(08-29-2018, 03:55 AM)mothered Wrote:

(08-29-2018, 01:52 AM)Kazuki Araya Wrote:

(08-28-2018, 11:07 AM)mothered Wrote: The first part Is the email address typical with ransomware (In general), that denotes the payment gateway for the end user.

If It's the latest Dharma Ransomware, It will have a .cmb extension which your example doesn't appear to be as such. Is every file on the PC encrypted?

Yes . All file in PC is encrypted. Cant be open.

It's very likely that the Ransomware has also disabled/Infected all restore points, but see If you can perform a System Restore obviously to the date prior to the Infection.

If that fails (which I believe It will), have a look at the following links on how to remove It.

https://bestsecuritysearch.com/dharma-ransomware-virus-removal/
https://sensorstechforum.com/combo-files-virus-dharma-ransomware-remove-restore-files/
https://www.pcworld.com/article/3176592/security/free-decryption-tools-now-available-for-dharma-ransomware.html
https://www.pcrisk.com/removal-guides/10672-dharma-ransomware
https://www.2-spyware.com/remove-dharma-ransomware-virus.html

(08-30-2018, 09:03 AM)Kazuki Araya Wrote:

(08-29-2018, 03:55 AM)mothered Wrote:

(08-29-2018, 01:52 AM)Kazuki Araya Wrote: Yes . All file in PC is encrypted. Cant be open.

It's very likely that the Ransomware has also disabled/Infected all restore points, but see If you can perform a System Restore obviously to the date prior to the Infection.

If that fails (which I believe It will), have a look at the following links on how to remove It.

https://bestsecuritysearch.com/dharma-ransomware-virus-removal/
https://sensorstechforum.com/combo-files-virus-dharma-ransomware-remove-restore-files/
https://www.pcworld.com/article/3176592/security/free-decryption-tools-now-available-for-dharma-ransomware.html
https://www.pcrisk.com/removal-guides/10672-dharma-ransomware
https://www.2-spyware.com/remove-dharma-ransomware-virus.html

Yes.. Cant Restore The Pc.
Look like option is use Spyhunters or STELLAR to bring down the Dharma Ransomware. But the software is not free.

(08-30-2018, 09:10 AM)mothered Wrote:

(08-30-2018, 09:03 AM)Kazuki Araya Wrote:

(08-29-2018, 03:55 AM)mothered Wrote: It's very likely that the Ransomware has also disabled/Infected all restore points, but see If you can perform a System Restore obviously to the date prior to the Infection.

If that fails (which I believe It will), have a look at the following links on how to remove It.

https://bestsecuritysearch.com/dharma-ransomware-virus-removal/
https://sensorstechforum.com/combo-files-virus-dharma-ransomware-remove-restore-files/
https://www.pcworld.com/article/3176592/security/free-decryption-tools-now-available-for-dharma-ransomware.html
https://www.pcrisk.com/removal-guides/10672-dharma-ransomware
https://www.2-spyware.com/remove-dharma-ransomware-virus.html

Yes.. Cant Restore The Pc.
Look like option is use Spyhunters or STELLAR to bring down the Dharma Ransomware. But the software is not free.

Have a look around the net for SpyHunter, there's quite a few sources available with a serial/key.

(08-30-2018, 09:30 AM)Kazuki Araya Wrote:

(08-30-2018, 09:10 AM)mothered Wrote:

(08-30-2018, 09:03 AM)Kazuki Araya Wrote: Yes.. Cant Restore The Pc.
Look like option is use Spyhunters or STELLAR to bring down the Dharma Ransomware. But the software is not free.

Have a look around the net for SpyHunter, there's quite a few sources available with a serial/key.

i already found one. but i dont know how to using spyhunters with the Dharma Ransomware.
https://chcrack.com/spyhunter-crack-serial/
credit to  vickych for sharing