.mars ransomware

Any decrypter for mars ransomware? I got a note,

All your files have been encrypted with MARS Virus.
Your unique id: {ID}


Our virus encrypted 5094 of your office files (xls, xlsx, doc, docx, ppt, pptx, odt, ods, pdf, dwg, psd, dbf, fpt, php, cdr, mdb, accdb). 
You can buy decryption for 800$ in Bitcoins.
But before you pay, you can make sure that we can really decrypt any of your files.
The encryption key and ID are unique to your computer, so you are guaranteed to be able to return your files.

To do this:
1) Send your unique id {ID} and max 3 files for test decryption to mars_dec@outlook.com or anton_ivan_8989@mail.ru
2) After decryption, we will send you the decrypted files and a unique bitcoin wallet for payment.
3) Be careful! Fakes are possible in Telegram, never pay until you receive test files after decryption!
4) After payment ransom for Bitcoin, we will send you a decryption program and instructions. If we can decrypt your files, we have no reason to deceive you after payment. 

or do this(If you have not received a reply by email):

1) Download and install Telegram Messanger: https://desktop.telegram.org/ (for Windows, Linux, macOS)
2) Find user mars_dec
3) Send your unique id {ID} and max 3 files for test decryption.
4) After decryption, we will send you the decrypted files and a unique bitcoin wallet for payment.
5) Be careful! Fakes are possible in Telegram, never pay until you receive test files after decryption!
6) After payment ransom for Bitcoin, we will send you a decryption program and instructions. If we can decrypt your files, we have no reason to deceive you after payment. 

FAQ:
Can I get a discount?
    No. The ransom amount is calculated based on the number of encrypted office files and discounts are not provided. All such messages will be automatically ignored. If you really only want some of the files, zip them and upload them somewhere. We will decode them for the price of 1 file = 1$.
What is Bitcoin?
    read bitcoin.org
Where to buy bitcoins?
    https://bitcoin.org/en/buy
    https://buy.moonpay.io
    or use google.com
Where is the guarantee that I will receive my files back?
    The very fact that we can decrypt your random files is a guarantee. It makes no sense for us to deceive you.
How quickly will I receive the key and decryption program after payment?
    As a rule, within a few hours, but very rarely there may be a delay of 1-2 days.
How does the decryption program work?
    It's simple. You need to copy the key and select a folder to decrypt. The program will automatically decrypt all encrypted files in this folder and its subfolders.
I will complain about your Telegram account and mailbox's..
    God help you. You won't find us anyway. But many people will be deprived of any opportunity to recover their files.

Edited 03 Nov, 03:39:08 • 148 views
0
votes
Sandor
• November 3, 2020
Hello, A couple of encrypted files pack in zip archive and attach to your next post. Also get the CollectionLog following by this instructions - https://kasperskyclub.com/support/question/7248

Please log in to write comments

@winson‍ Welcome.

Please check this :

https://noransom.kaspersky.com/   (*)
 
https://www.kaspersky.com/blog/no-no-ransom/13364/
 
https://id-ransomware.malwarehunterteam.com/
 
(*) Also : “Ask for the tech support (only for Kaspersky’s paid products customers)”

November 3, 2020
0
votes

Please log in to write comments