Зашифровались данные .MAKGR

[celica_ekb]

Your personal ID

3F 52 88 51 B4 D6 6B E8 87 19 10 BD D2 C7 F9 FB38 10 B9 94 F8 EB 1B DB CC 21 37 3C FA EB E8 0DE8 2A 7C C6 EB 06 32 C3 2A CA FA 6D 61 6C A3 A811 20 E0 E9 BE 2B 84 A3 01 65 B6 48 F6 E2 0C 5122 62 BE 9A 48 05 17 80 A2 44 D2 17 F2 BE 92 4229 64 CC B8 09 5D 5F B8 1C D8 C3 25 45 54 9F 501D C1 14 38 87 0F 12 97 A8 AF 79 A6 59 F9 BE 2476 35 0F 22 35 BE 90 18 C3 84 B5 82 8B 48 BC F02F D4 AF 78 E5 CF A6 B4 53 A1 93 F5 B8 8A 2C 10A1 87 E3 E4 AB DE 82 59 B1 F5 8B DB 07 59 14 E866 C4 6A 17 B7 EE B0 BF CB 3D D2 36 B7 57 86 02B1 75 D1 93 B4 D6 DC 6C 37 F6 4C 16 2F 09 03 E0CA 0B 54 66 B9 2A 59 E0 7A 94 73 F8 B4 2E 75 0B75 2C 91 A3 E8 83 EC 40 84 E9 5F 52 7F 0B 73 4CAC D8 9E E6 B8 57 6D C6 B2 D9 44 AF B2 05 02 6F0D BF 33 56 22 0A AA 41 1B 5A 0C D8 B0 78 02 7D

English

☣ Your files are encrypted! ☣ ⬇ To decrypt, follow the instructions below. ⬇

To recover data you need decryptor.
To get the decryptor you should:

Send 1 crypted test image or text file or document to makgregorways@aol.com
(Or alternate mail makgregorways@india.com )

In the letter include your personal ID (look at the beginning of this document).

We will give you the decrypted file and assign the price for decryption all files

 

After we send you instruction how to pay for decrypt and after payment you will receive a decryptor and instructions We can decrypt one file in quality the evidence that we have the decoder.

MOST IMPORTANT!!!

Do not contact other services that promise to decrypt your files, this is fraud on their part! They will buy a decoder from us, and you will pay more for his services. No one, except makgregorways@aol.com, will decrypt your files.

• Only makgregorways@aol.com can decrypt your files
• Do not trust anyone besides makgregorways@aol.com
• Antivirus programs can delete this document and you can not contact us later.
• Attempts to self-decrypting files will result in the loss of your data
• Decoders other users are not compatible with your data, because each user's unique encryption key 

 

 

arhiv.rar

[Sandor]

Здравствуйте!

 

Расшифровки для этого типа вымогателя нет. Если нужна очистка системы и проверка на активное заражение, выполните Порядок оформления запроса о помощи

[celica_ekb]

Kaspersky Virus Removal Tool показывает Trojan.BAT.Delsha.d и Trojan-Ransom.Win32.Purgen.mm

Изменено 22 сентября, 2017 пользователем celica_ekb

[Sandor]

Соберите CollectionLog, посмотрим.