NOV Ransomware

The NOV Ransomware is a file-locker whose ransom note does not resemble the message seen by other ransomware families. However, a closer look at NOV Ransomware's encryption routine revealed that the malware is not new at all – it is based on the infamous Dharma Ransomware family. Sadly, this is this means that it uses a nearly flawless file-locking mechanism. Because of this, victims of the NOV Ransomware may not be able to find a free and reliable decryption tool. It is important to mention that the NOV Ransomware criminals claim to have such a tool at their disposal, but they are only willing to sell it for some Bitcoin.

Of course, sending cryptocurrency to cybercriminals is a terrible idea, which you should not consider at all. If the NOV Ransomware's authors are paid, there is no guarantee that they will fulfill their part of the deal.

Files damaged by the NOV Ransomware are marked with the extension '.id-<VICTIM ID>.[yourfiles1@cock.li].NOV.' The ransom note is called 'MANUAL.txt,' and victims of the attack will usually find it on the desktop. The criminals' message is very concise, and it simply asks the victim to message them at yourfiles1@cock.li or tcprx@tutanota.de. They also warn the victim not to try alternative data recovery software, as this would result in an increase in the ransom payment.

You should not trust NOV Ransomware's creators and remember their offer is not acceptable. The best response is to use a suitable anti-virus tool to terminate the threat and then experiment with reputable data recovery software and methods.