Description
Ransomware believed to be a variant of MailTo.
27319e75c23693399977e92b9a7ba5680a7a9db448f93b3221840c61301604d5.exe
69KB
200504-ktgqftw3ya
3a601ee68000508d58ea12203449a202
9068567b2b3fdae864ca9b1fb9013d0305e3ca83
27319e75c23693399977e92b9a7ba5680a7a9db448f93b3221840c61301604d5
176d60567b2bcf89aa6338f3f14b22ee2592e4ea6349c0a51d67e5b7655de611c2a6e58495cab8d9c5c26deaef03ad19852a0f32cd37466fa3241d61395527b0
Path | C:\Users\Admin\49C13C-Readme.txt |
Family | netwalker |
Ransom Note |
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}
|
URLs |
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion |
Path | C:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\49C13C-Readme.txt |
Family | netwalker |
Ransom Note |
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}
|
URLs |
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion |
Path | C:\Program Files\Microsoft Office\Office14\49C13C-Readme.txt |
Family | netwalker |
Ransom Note |
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}
|
URLs |
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion |
Path | C:\Program Files\Microsoft Office\MEDIA\OFFICE14\LINES\49C13C-Readme.txt |
Family | netwalker |
Ransom Note |
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}
|
URLs |
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion |
Path | C:\Program Files\Microsoft Office\MEDIA\OFFICE14\BULLETS\49C13C-Readme.txt |
Family | netwalker |
Ransom Note |
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}
|
URLs |
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion |
Path | C:\Program Files\Microsoft Office\CLIPART\PUB60COR\49C13C-Readme.txt |
Family | netwalker |
Ransom Note |
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .49c13c
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_49c13c:
Tgcvijc7spA+JOEw5iI9qb+pWYVOIPG6U7D5K+SMtSZuPVRIxe
4Se8TZTgqAx7Y7yRKd2lyvtdNQ+GHKU8RBYAInnMYyeVkiq/a6
0pBtoAxZdQ/b2Bi0iSd4mABCvvzDNhSGnN3aRoZ/uEIQPMTQjf
yGQLttaSzW++xBKx90wAc4smQ5aHTFccsqIAfuJidduKDTRUx4
pUa+nBo4j9eEiuoRx4qIoXmlS8W5ov0xC9zrEpSM5dR2B+Kgc2
SmN5FMczhQtnrXsXOlH2VRjsHesbgVMk0nZdf9yQ==}
|
URLs |
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion |
Path | C:\odt\825A98-Readme.txt |
Family | netwalker |
Ransom Note |
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .825a98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_825a98:
XKAiak9gSjGu7pGY4GnEtpY4Q/oKFOaNckOxxMrEAzQlWV3GRY
uWZj/ncvmSt/I6gmnkrEyjhT6WEMiZ18zjjnRE3acZy7Ziq/a6
0oNHIyVhcli/YuVZ4dry9rtEmH1581cBBmWpOXPgoQlIxy2ySn
Zn4efeFaCl+6hJrLmIATx1HzxD0G3Akw9h0xBgY5NXspREjZtz
uFtMf0AL/s18dpC6BZ54UizvpDmQnnkFB2Kam+DuYyXU8vUx5I
8tpUyahhMhlowjilAIXHMN+SxQpzllFHORvrOdwQ==}
|
URLs |
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion |
Path | C:\Users\Admin\Desktop\825A98-Readme.txt |
Family | netwalker |
Ransom Note |
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .825a98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_825a98:
XKAiak9gSjGu7pGY4GnEtpY4Q/oKFOaNckOxxMrEAzQlWV3GRY
uWZj/ncvmSt/I6gmnkrEyjhT6WEMiZ18zjjnRE3acZy7Ziq/a6
0oNHIyVhcli/YuVZ4dry9rtEmH1581cBBmWpOXPgoQlIxy2ySn
Zn4efeFaCl+6hJrLmIATx1HzxD0G3Akw9h0xBgY5NXspREjZtz
uFtMf0AL/s18dpC6BZ54UizvpDmQnnkFB2Kam+DuYyXU8vUx5I
8tpUyahhMhlowjilAIXHMN+SxQpzllFHORvrOdwQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .825a98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_825a98:
XKAiak9gSjGu7pGY4GnEtpY4Q/oKFOaNckOxxMrEAzQlWV3GRY
uWZj/ncvmSt/I6gmnkrEyjhT6WEMiZ18zjjnRE3acZy7Ziq/a6
0oNHIyVhcli/YuVZ4dry9rtEmH1581cBBmWpOXPgoQlIxy2ySn
Zn4efeFaCl+6hJrLmIATx1HzxD0G3Akw9h0xBgY5NXspREjZtz
uFtMf0AL/s18dpC6BZ54UizvpDmQnnkFB2Kam+DuYyXU8vUx5I
8tpUyahhMhlowjilAIXHMN+SxQpzllFHORvrOdwQ==}
|
URLs |
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion |
Path | C:\Users\Admin\Pictures\825A98-Readme.txt |
Family | netwalker |
Ransom Note |
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .825a98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_825a98:
XKAiak9gSjGu7pGY4GnEtpY4Q/oKFOaNckOxxMrEAzQlWV3GRY
uWZj/ncvmSt/I6gmnkrEyjhT6WEMiZ18zjjnRE3acZy7Ziq/a6
0oNHIyVhcli/YuVZ4dry9rtEmH1581cBBmWpOXPgoQlIxy2ySn
Zn4efeFaCl+6hJrLmIATx1HzxD0G3Akw9h0xBgY5NXspREjZtz
uFtMf0AL/s18dpC6BZ54UizvpDmQnnkFB2Kam+DuYyXU8vUx5I
8tpUyahhMhlowjilAIXHMN+SxQpzllFHORvrOdwQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .825a98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_825a98:
XKAiak9gSjGu7pGY4GnEtpY4Q/oKFOaNckOxxMrEAzQlWV3GRY
uWZj/ncvmSt/I6gmnkrEyjhT6WEMiZ18zjjnRE3acZy7Ziq/a6
0oNHIyVhcli/YuVZ4dry9rtEmH1581cBBmWpOXPgoQlIxy2ySn
Zn4efeFaCl+6hJrLmIATx1HzxD0G3Akw9h0xBgY5NXspREjZtz
uFtMf0AL/s18dpC6BZ54UizvpDmQnnkFB2Kam+DuYyXU8vUx5I
8tpUyahhMhlowjilAIXHMN+SxQpzllFHORvrOdwQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .825a98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_825a98:
XKAiak9gSjGu7pGY4GnEtpY4Q/oKFOaNckOxxMrEAzQlWV3GRY
uWZj/ncvmSt/I6gmnkrEyjhT6WEMiZ18zjjnRE3acZy7Ziq/a6
0oNHIyVhcli/YuVZ4dry9rtEmH1581cBBmWpOXPgoQlIxy2ySn
Zn4efeFaCl+6hJrLmIATx1HzxD0G3Akw9h0xBgY5NXspREjZtz
uFtMf0AL/s18dpC6BZ54UizvpDmQnnkFB2Kam+DuYyXU8vUx5I
8tpUyahhMhlowjilAIXHMN+SxQpzllFHORvrOdwQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .825a98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_825a98:
XKAiak9gSjGu7pGY4GnEtpY4Q/oKFOaNckOxxMrEAzQlWV3GRY
uWZj/ncvmSt/I6gmnkrEyjhT6WEMiZ18zjjnRE3acZy7Ziq/a6
0oNHIyVhcli/YuVZ4dry9rtEmH1581cBBmWpOXPgoQlIxy2ySn
Zn4efeFaCl+6hJrLmIATx1HzxD0G3Akw9h0xBgY5NXspREjZtz
uFtMf0AL/s18dpC6BZ54UizvpDmQnnkFB2Kam+DuYyXU8vUx5I
8tpUyahhMhlowjilAIXHMN+SxQpzllFHORvrOdwQ==}
|
URLs |
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion |
Path | C:\Users\Admin\AppData\Local\TileDataLayer\Database\825A98-Readme.txt |
Family | netwalker |
Ransom Note |
Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .825a98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_825a98:
XKAiak9gSjGu7pGY4GnEtpY4Q/oKFOaNckOxxMrEAzQlWV3GRY
uWZj/ncvmSt/I6gmnkrEyjhT6WEMiZ18zjjnRE3acZy7Ziq/a6
0oNHIyVhcli/YuVZ4dry9rtEmH1581cBBmWpOXPgoQlIxy2ySn
Zn4efeFaCl+6hJrLmIATx1HzxD0G3Akw9h0xBgY5NXspREjZtz
uFtMf0AL/s18dpC6BZ54UizvpDmQnnkFB2Kam+DuYyXU8vUx5I
8tpUyahhMhlowjilAIXHMN+SxQpzllFHORvrOdwQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .825a98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_825a98:
XKAiak9gSjGu7pGY4GnEtpY4Q/oKFOaNckOxxMrEAzQlWV3GRY
uWZj/ncvmSt/I6gmnkrEyjhT6WEMiZ18zjjnRE3acZy7Ziq/a6
0oNHIyVhcli/YuVZ4dry9rtEmH1581cBBmWpOXPgoQlIxy2ySn
Zn4efeFaCl+6hJrLmIATx1HzxD0G3Akw9h0xBgY5NXspREjZtz
uFtMf0AL/s18dpC6BZ54UizvpDmQnnkFB2Kam+DuYyXU8vUx5I
8tpUyahhMhlowjilAIXHMN+SxQpzllFHORvrOdwQ==}Hi!
Your files are encrypted by Netwalker.
All encrypted files for this computer has extension: .825a98
--
If for some reason you read this text before the encryption ended,
this can be understood by the fact that the computer slows down,
and your heart rate has increased due to the ability to turn it off,
then we recommend that you move away from the computer and accept that you have been compromised.
Rebooting/shutdown will cause you to lose files without the possibility of recovery.
--
Our encryption algorithms are very strong and your files are very well protected,
the only way to get your files back is to cooperate with us and get the decrypter program.
Do not try to recover your files without a decrypter program, you may damage them and then they will be impossible to recover.
For us this is just business and to prove to you our seriousness, we will decrypt you one file for free.
Just open our website, upload the encrypted file and get the decrypted file for free.
--
Steps to get access on our website:
1.Download and install tor-browser: https://torproject.org/
2.Open our website: pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion
If the website is not available, open another one: rnfdsgm6wb6j6su5txkekw4u4y47kp2eatvu7d6xhyn5cs4lt4pdrqqd.onion
3.Put your personal code in the input form:
{code_825a98:
XKAiak9gSjGu7pGY4GnEtpY4Q/oKFOaNckOxxMrEAzQlWV3GRY
uWZj/ncvmSt/I6gmnkrEyjhT6WEMiZ18zjjnRE3acZy7Ziq/a6
0oNHIyVhcli/YuVZ4dry9rtEmH1581cBBmWpOXPgoQlIxy2ySn
Zn4efeFaCl+6hJrLmIATx1HzxD0G3Akw9h0xBgY5NXspREjZtz
uFtMf0AL/s18dpC6BZ54UizvpDmQnnkFB2Kam+DuYyXU8vUx5I
8tpUyahhMhlowjilAIXHMN+SxQpzllFHORvrOdwQ==}
|
URLs |
http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion http://pb36hu4spl6cyjdfhing7h3pw6dhpk32ifemawkujj4gp33ejzdq3did.onion |
27319e75c23693399977e92b9a7ba5680a7a9db448f93b3221840c61301604d5.exe
3a601ee68000508d58ea12203449a202
69KB
9068567b2b3fdae864ca9b1fb9013d0305e3ca83
27319e75c23693399977e92b9a7ba5680a7a9db448f93b3221840c61301604d5
176d60567b2bcf89aa6338f3f14b22ee2592e4ea6349c0a51d67e5b7655de611c2a6e58495cab8d9c5c26deaef03ad19852a0f32cd37466fa3241d61395527b0
Ransomware believed to be a variant of MailTo.
Ransomware often targets backup files to inhibit system recovery.
Infostealers often target stored browser data, which can include saved credentials etc.