Jump to content

Dharma virus with BIP extension

Recommended Posts

I was hit with this virus.  My files are in this form:


There is a FILES ENCRTYPED.txt that was added that says:

all your data has been locked us
You want to return?
write email olivias3vzjscott@aol.com or laurenlyfxecarter@aol.com
Is there any decrypt methods for this one?
I believe the bad exe that is on my pc that caused this is called "SHAOFAO.EXE" and I think I was infected by them using my Remote Desktop.

Share this post

Link to post

My server was infected by trojan, just as TS told. And all files got encrypted and have '.combo' extension. After long search, I found out, that there is no decryptor for it. 

\\Edit: Do Not pay money to criminals!

Edited by richbuff
Removed bad advice.

Share this post

Link to post

  • Create New...

Important Information

We use cookies to make your experience of our websites better. By using and further navigating this website you accept this. Detailed information about the use of cookies on this website is available by clicking on more information.