We have no reason to deceive you after receiving the ransom, since we are not barbarians and moreover it will harm our business.Īfter decrypting the test files, you will see the amount of payment in bitcoins and a bitcoin wallet for payment.ĭepending on your location, you can pay the ransom in different ways. This means that we can decrypt all your files after paying the ransom. Your main guarantee is the ability to decrypt test files. What are the guarantees that I can decrypt my files after paying the ransom? Therefore, we recommend that you make payment within a few hours. Its rate can be both stable and change very quickly. Keep in mind that some exchangers delay payment for 1-3 days! Also keep in mind that Bitcoin is a very volatile currency, The number of bitcoins for payment is fixed at the rate at the time of decryption of test files. You have 10 days to pay for the ransom after decrypting the test files. How much time do I have to pay for decryption? The encryption key and ID are unique to your computer, so you are guaranteed to be able to return your files.īut before you pay, you can make sure that we can really decrypt any of your files.Ģ) Open the web page in the Tor Browser and follow the instructions. It is the same thing as losing them forever, but with our help, you can restore them. You will not be able to work with them, read them or see them, This means that the structure and data within your files have been irrevocably changed, The text of the ransom note can be found below:Īll of your files were protected by a strong encryption with AES cbc-128 using NamPoHyu Virus. The ransom note '!DECRYPT_INSTRUCTION.TXT' instructs the victim to go to a Tor website to contact the criminals. MegaLocker encrypts a victim's files using AES-128 ECB, and adds the extension '.nampohyu' to files.

Mega decryption key bypass