ransomware .She0ex0i extension

[iohhd]

Hi to all . Anyone has any solution for ransomware decryption ? file extensions is .She0ex0i . What ransomware is?

[Arch Stanton]

Is there a demand note?

[iohhd]

yes

"YOUR FILES ARE ENCRYPTED !!!
TO DECRYPT, FOLLOW THE INSTRUCTIONS:
To recover data you need decrypt tool.
To get the decrypt tool you should:
After we send you instruction how to pay for decrypt tool and after payment you will receive a decryption tool!
We can decrypt few files in quality the evidence that we have the decoder.
DO NOT TRY TO DO SOMETHING WITH YOUR FILES BY YOURSELF YOU WILL BRAKE YOUR DATA !!! ONLY WE ARE CAN HELP YOU! CONTACT US:
Install a chat program https://tox.chat/clients.html
https://github.com/uTox/uTox/releases/
https://github.com/uTox/uTox/releases/d ... x86_64.exe
add us to the list and wait for a response
(id user......)

Attachments

demand note

[Arch Stanton]

Can you share one of these encrypted JPEGs?

[iohhd]

yes of corse Arch Stanton
https://we.tl/t-0c4hqAIu99
thank you

[Arch Stanton]

Could be this, https://www.bleepingcomputer.com/forums ... ort-topic/

[Arch Stanton]

These files aren't encrypted, they're destroyed. You can pay but they'll never be able to decrypt anything for you, it's pure vandalism.

Oddly some of the CR3 contain same piece of JPEG data ..

[iohhd]

thank you Arch for support till now . I try to believe that there is still hope. Now I'm trying to recover some files with data recovery. I'll let you know. In the meantime, if there's anyone else with a solution, I'd appreciate it.

[Arch Stanton]

Oh, don't misunderstand me, I am not trying to discourage anyone from trying data recovery, I'd most definitively scan the drive to see if there's stuff that can be salvaged. But the usual ransomware , pay ransom, get files back, won't work here.