Main » Forums home » Forensics

All times are UTC - 5 hours [ DST ]



Post new topic Reply to topic  Page 1 of 1
  [ 9 posts ] 
  Previous topic | Next topic 
Author Message
iohhd
 Post subject: ransomware .She0ex0i extension
PostPosted: February 25th, 2025, 17:24 
Offline

Joined: February 25th, 2025, 17:00
Posts: 4
Location: Italia
Hi to all . Anyone has any solution for ransomware decryption ? file extensions is .She0ex0i . What ransomware is?
Top
 Profile  
 
Arch Stanton
 Post subject: Re: ransomware .She0ex0i extension
PostPosted: February 25th, 2025, 21:07 
Offline
User avatar

Joined: May 13th, 2019, 7:50
Posts: 1070
Location: Nederland
Is there a demand note?

_________________
Joep - http://www.disktuna.com - video & photo repair & recovery service
Top
 Profile  
 
iohhd
 Post subject: Re: ransomware .She0ex0i extension
PostPosted: February 26th, 2025, 3:05 
Offline

Joined: February 25th, 2025, 17:00
Posts: 4
Location: Italia
yes

"YOUR FILES ARE ENCRYPTED !!!
TO DECRYPT, FOLLOW THE INSTRUCTIONS:
To recover data you need decrypt tool.
To get the decrypt tool you should:
After we send you instruction how to pay for decrypt tool and after payment you will receive a decryption tool!
We can decrypt few files in quality the evidence that we have the decoder.
DO NOT TRY TO DO SOMETHING WITH YOUR FILES BY YOURSELF YOU WILL BRAKE YOUR DATA !!! ONLY WE ARE CAN HELP YOU! CONTACT US:
Install a chat program https://tox.chat/clients.html
https://github.com/uTox/uTox/releases/
https://github.com/uTox/uTox/releases/d ... x86_64.exe
add us to the list and wait for a response
(id user......)


Attachments:
File comment: demand note
Screenshot 2025-02-26 080008.jpg
Screenshot 2025-02-26 080008.jpg [ 431.91 KiB | Viewed 4711 times ]
Top
 Profile  
 
Arch Stanton
 Post subject: Re: ransomware .She0ex0i extension
PostPosted: February 26th, 2025, 19:51 
Offline
User avatar

Joined: May 13th, 2019, 7:50
Posts: 1070
Location: Nederland
Can you share one of these encrypted JPEGs?

_________________
Joep - http://www.disktuna.com - video & photo repair & recovery service
Top
 Profile  
 
iohhd
 Post subject: Re: ransomware .She0ex0i extension
PostPosted: February 26th, 2025, 19:56 
Offline

Joined: February 25th, 2025, 17:00
Posts: 4
Location: Italia
yes of corse Arch Stanton
https://we.tl/t-0c4hqAIu99
thank you
Top
 Profile  
 
Arch Stanton
 Post subject: Re: ransomware .She0ex0i extension
PostPosted: February 26th, 2025, 19:57 
Offline
User avatar

Joined: May 13th, 2019, 7:50
Posts: 1070
Location: Nederland
Could be this, https://www.bleepingcomputer.com/forums ... ort-topic/

_________________
Joep - http://www.disktuna.com - video & photo repair & recovery service
Top
 Profile  
 
Arch Stanton
 Post subject: Re: ransomware .She0ex0i extension
PostPosted: February 27th, 2025, 5:56 
Offline
User avatar

Joined: May 13th, 2019, 7:50
Posts: 1070
Location: Nederland
These files aren't encrypted, they're destroyed. You can pay but they'll never be able to decrypt anything for you, it's pure vandalism.

Oddly some of the CR3 contain same piece of JPEG data ..

Attachment:
piece-of-jpeg.jpg
piece-of-jpeg.jpg [ 159.58 KiB | Viewed 4550 times ]

_________________
Joep - http://www.disktuna.com - video & photo repair & recovery service
Top
 Profile  
 
iohhd
 Post subject: Re: ransomware .She0ex0i extension
PostPosted: February 27th, 2025, 8:04 
Offline

Joined: February 25th, 2025, 17:00
Posts: 4
Location: Italia
thank you Arch for support till now . I try to believe that there is still hope. Now I'm trying to recover some files with data recovery. I'll let you know. In the meantime, if there's anyone else with a solution, I'd appreciate it.
Top
 Profile  
 
Arch Stanton
 Post subject: Re: ransomware .She0ex0i extension
PostPosted: February 27th, 2025, 8:54 
Offline
User avatar

Joined: May 13th, 2019, 7:50
Posts: 1070
Location: Nederland
Oh, don't misunderstand me, I am not trying to discourage anyone from trying data recovery, I'd most definitively scan the drive to see if there's stuff that can be salvaged. But the usual ransomware , pay ransom, get files back, won't work here.

_________________
Joep - http://www.disktuna.com - video & photo repair & recovery service
Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  Page 1 of 1
  [ 9 posts ] 

Main » Forums home » Forensics

All times are UTC - 5 hours [ DST ]

Who is online

Users browsing this forum: No registered users and 5 guests

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Switch to mobile style
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group