extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

Darkside — 20201115

Dated record

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 243 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
Darkside
Record date
Nov 15, 2020
Messages
243
Participants
Darkside, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Victim Victim Date

    How to buy Bitcoin for this amount?

  2. Message 002 From Darkside Actor / other Date

    Hello!

  3. Message 003 From Darkside Actor / other Date

    Moment please, let me prepare a manual for you.

  4. Message 004 From Darkside Actor / other Date

    are you sure that you want to pay in bitcoin? maybe you prefer monero? cause in case you want to pay in bitcoin, you have to pay in 20% more because of service fees.

  5. Message 005 From Victim Victim Date

    how monero works?

  6. Message 006 From Darkside Actor / other Date

    process is literally the same

  7. Message 007 From Darkside Actor / other Date

    give me a moment i provide a monero tutorial

  8. Message 008 From Victim Victim Date

    ok good for monero

  9. Message 009 From Darkside Actor / other Date

    monero manual

    here is the fastest and safest service to buy monero in your country https://localmonero.co/ alternative way is to buy bitcoin via next manual and change it to monero here https://changelly.com/

    bitcoin manual here are some services where you can safely buy and send bitcoin https://localcryptos.com/ manual how to buy and send is placed on the main page, this is the simplest and fastest way, no any verification required/////// https://paxful.com/ here is the short manual how to buy and send https://www.youtube.com/watch?v=EjB5qFW0bJ8 profile verification may be required//////// https://www.coinbase.com/ here is the short manual how to buy and send https://www.youtube.com/watch?v=Neph3rjv0Co profile verification may be required/// chose which one you like more, and buy bitcoin.

    hen text in chat and we provide the wallet for transfer

  10. Message 010 From Victim Victim Date

    ok. I'm working on it

  11. Message 011 From Victim Victim Date

    ok. I'm working on it

  12. Message 012 From Victim Victim Date

    Hi. The price is too high

  13. Message 013 From Victim Victim Date

    could we find a mediation?

  14. Message 014 From Victim Victim Date

    we do not have that amount of money. We are a little company

  15. Message 015 From Victim Victim Date

    5.000€?

  16. Message 016 From Darkside Actor / other Date

    We do not make such big discounts.

  17. Message 017 From Darkside Actor / other Date

    Read about us on the Internet.

  18. Message 018 From Darkside Actor / other Date

    5000 euro is impossible. you are not a small company, we've been working on your network, we have encryped 200tb of data, you can not be a small company, you have a whole data center.

  19. Message 019 From Victim Victim Date

    please give us a sustainable amount we are 80 people that works from [redacted location]

  20. Message 020 From Victim Victim Date

    [redacted location]

  21. Message 021 From Victim Victim Date

    we work for non profit organization like [redacted]

  22. Message 022 From Darkside Actor / other Date

    before the attack we checked info about your company, so it's absolutely useless to prove us anything. discount is possible, but not in the amount you want. you can try to take a loan and find any cryptobrocker who will resolve all the cryptocurrency exchange.

  23. Message 023 From Victim Victim Date

    10.000€

  24. Message 024 From Darkside Actor / other Date

    You are wasting our time. Write when you have serious offers.

  25. Message 025 From Darkside Actor / other Date

    discount x100 from first amount is impossible. we can reduce the price by 50 000. so you have to pay 950 000 $

  26. Message 026 From Victim Victim Date

    we do not have that amount. Is out of our business

  27. Message 027 From Darkside Actor / other Date

    take a loan

  28. Message 028 From Victim Victim Date

    I can make you an offer compatible with my availability and comparable to the time it would take if I had to restore from backups

  29. Message 029 From Darkside Actor / other Date

    we know everything about your backups, if you could restore, you wouldn't text us at all. so please stop wasting our time and yours, you know, that the only way to restore your business is to make the payment requested

  30. Message 030 From Darkside Actor / other Date

    are we talking with recovery company right now? cause few hours ago this conversation had a bit another vector.

  31. Message 031 From Victim Victim Date

    no I move from home to office

  32. Message 032 From Darkside Actor / other Date

    go back home, you were much more pliable from there.

  33. Message 033 From Victim Victim Date

    I'm talking to the CEO to unadestand how much can we pay

  34. Message 034 From Darkside Actor / other Date

    ok we are waiting

  35. Message 035 From Victim Victim Date

    I talked with my CEO we want to solve the issue. We can offer 75.000€ to start the decryption process and 75.000 at the end of the decryption. (in total 150.000€)

  36. Message 036 From Darkside Actor / other Date

    This amount is not enough. Raise the price and we will give you an additional discount. We can refuse payment and not give you a decryptor. Can you afford it? What will you tell your clients? We understand you and are ready to give you a decryptor right now. Give us a good offer.

  37. Message 037 From Darkside Actor / other Date

    Any phased payment options are not possible. You pay first, then we give you decryptors. If you are not sure, you can give us test files and we will decrypt them for you.

  38. Message 038 From Darkside Actor / other Date

    In Linux, we specially encrypt log files, they are small in size and you can upload them to chat.

  39. Message 039 From Victim Victim Date

    In you site you declare that you do not attack no.profit organization. We host the site of a lot of no profit organization that currently has the service down. Please accept our offer 150.000 all in one

  40. Message 040 From Darkside Actor / other Date

    Look, if you were a non-profit organization, you wouldn't be attacked by anyone. Everyone can say that they are helping someone. In the current case, your offer does not meet our expectations. It will get you nowhere and you are wasting your time. Give us a better price and we will give you a discount.

  41. Message 041 From Darkside Actor / other Date

    I want you to understand one thing, it doesn't matter to me how long it takes to discuss the price. This is important for you. The faster you get decryptors, the faster you will continue to make money.

  42. Message 042 From Victim Victim Date

    I sent you a small files

    [redacted].txt.[redacted] 8.95 kB

  43. Message 043 From Darkside Actor / other Date

    File

    [redacted].txt 8.81 kB

  44. Message 044 From Victim Victim Date

    Hi, we had a crisis committee meeting. We evaluated your proposal. I know that you don't want waste time but trust me we are not so big as you think. We need time to get a reasonable amount of MONERO or BITCOIN. We try deliver an extra special effort and we can raise to 250.000€. We hope that this offers meet your expectation

  45. Message 045 From Victim Victim Date

    i'm moving to home becouse of lock down and we had to go home at 10pm

  46. Message 046 From Darkside Actor / other Date

    We are ready to accept 700k dollars. We will give you a discount of $ 300k.

  47. Message 047 From Victim Victim Date

    We want to pay but we do not have 700k. We did the best effort to offer you 250.000

  48. Message 048 From Victim Victim Date

    here is midnigth, i need to sleep and I hope to found some good news.

  49. Message 049 From Darkside Actor / other Date

    Let's get back to this question in the morning! you need to rest, you are right! Goodnight!

  50. Message 050 From Victim Victim Date

    good moring......I hope

  51. Message 051 From Darkside Actor / other Date

    We've made you a 30% discount. Give us a better price and we will try to give you an additional discount.

  52. Message 052 From Victim Victim Date

    Trust me. We host site for no-profit organization that do not have a lot of money. You found a lot of data but this are our kind of customer. We made the best 250.000€ is a very high amount for us. We had also a problem to find this amount in a few days. The site that you suggested offer MONERO at block of 5000 or 10.000€

  53. Message 053 From Victim Victim Date

    We are 60 employee and only 6 on IT....we are working on this problem 24 hours....we need your help

  54. Message 054 From Darkside Actor / other Date

    I spoke to my boss and explained your situation to him. He approved a payment of 350k dollars. There will be no more discounts. Now you are offering 300k dollars, raise your price by 50k and we will close this deal now.

  55. Message 055 From Victim Victim Date

    do you have a quick way to get that amount of MONERO?

  56. Message 056 From Victim Victim Date

    we accept your proposal

  57. Message 057 From Darkside Actor / other Date

    Price updated. Reload the page.

  58. Message 058 From Victim Victim Date

    ok. Give us a reference to get that amount of monero

  59. Message 059 From Darkside Actor / other Date

    Yes, have you considered buying through the exchange? Or are you having trouble with it?

  60. Message 060 From Darkside Actor / other Date

    If you find it difficult to get Monero - buy Bitcoin first. Then change it to Monero.

  61. Message 061 From Victim Victim Date

    We want to buy through the exchange. But they exchange at block of 10.000€.

  62. Message 062 From Darkside Actor / other Date

    I think it is not difficult to buy bitcoin in your country. Use exchangers or crypto exchanges (binance, et al.).

  63. Message 063 From Victim Victim Date

    ok. I will update you

  64. Message 064 From Victim Victim Date

    we have to do change € on our wallet or directly charge on your wallet

  65. Message 065 From Darkside Actor / other Date

    Change money on your wallet and then send us cryptocurrency

  66. Message 066 From Victim Victim Date

    Hi, just to tell you that we are working to get cryptocurrency

  67. Message 067 From Darkside Actor / other Date

    OK, we wait.

  68. Message 068 From Victim Victim Date

    Good moring. Very difficult to move on BTC that amount on one wallet. You need transaction from one wallet alone?

  69. Message 069 From Victim Victim Date

    can we make in more transcation?

  70. Message 070 From Victim Victim Date

    could you Decrypt some server?

  71. Message 071 From Darkside Actor / other Date

    We are waiting for xmr from you, not btc. If you decided to pay with btc, you have to pay additional 20%.

  72. Message 072 From Darkside Actor / other Date

    And you can use several transaction

  73. Message 073 From Darkside Actor / other Date

    After payment you will receive decryptor for all your network.

  74. Message 074 From Victim Victim Date

    several transaction from same wallet or we could use different wallet?

  75. Message 075 From Darkside Actor / other Date

    You can use different wallet

  76. Message 076 From Victim Victim Date

    How many BTC we had to pay? Yesterday i saw 25.18, now I see 23.3

  77. Message 077 From Darkside Actor / other Date

    Pay the amount that you see now

  78. Message 078 From Darkside Actor / other Date

    Btc rate is not stable, so don't wait and pay quickly

  79. Message 079 From Victim Victim Date

    do not change anymore because we had a lot o difficult to get crypto BTC

  80. Message 080 From Darkside Actor / other Date

    i can fixed the rate, but you have to pay for 6 hours

  81. Message 081 From Darkside Actor / other Date

    will pay for this time?

  82. Message 082 From Victim Victim Date

    we'll try in 12 hours, but i'm not sure, maybe 24.

  83. Message 083 From Darkside Actor / other Date

    i have fixed your btc amount, for the next 24 hours it doesn't depend from btc rate

  84. Message 084 From Darkside Actor / other Date

    but you must pay as soon as possible

  85. Message 085 From Victim Victim Date

    ok

  86. Message 086 From Victim Victim Date

    help us as soon as possible. We are very little to pay that amount but we do....and also we had to work a lot of other days....give an hand as soon as you can....trust us

  87. Message 087 From Darkside Actor / other Date

    After payment I will immediately give you decryptors.

  88. Message 088 From Victim Victim Date

    Hi. Why the rate changed again?

  89. Message 089 From Victim Victim Date

    you promise me to block the rate of BTC to 23.3

  90. Message 090 From Victim Victim Date

    we already had a trade for that amount and we need to fix it

  91. Message 091 From Victim Victim Date

    Are you there?

  92. Message 092 From Darkside Actor / other Date

    Hello

  93. Message 093 From Darkside Actor / other Date

    Rate was changed yesterday, before i fixed it

  94. Message 094 From Darkside Actor / other Date

    You actual amount for the next 12 hours 23.61 BTC

  95. Message 095 From Victim Victim Date

    we bought yesterday 23.3 by an exchanger and we are waiting for the transaction. We cannot change the amount now

  96. Message 096 From Victim Victim Date

    the payment is in process

  97. Message 097 From Darkside Actor / other Date

    okay, waiting for 23.3 BTC from you in next several hours

  98. Message 098 From Victim Victim Date

    ok. May I ask a partial decrypion of one server?

  99. Message 099 From Darkside Actor / other Date

    After payment you'll immediately receive decryptor for all network

  100. Message 100 From Darkside Actor / other Date

    You have the last 3 hours to pay the fixed btc amount after that time the rate will be float again.

  101. Message 101 From Victim Victim Date

    be patient

  102. Message 102 From Victim Victim Date

    the transaction is in progress with our exchanger

  103. Message 103 From Victim Victim Date

    technical time

  104. Message 104 From Darkside Actor / other Date

    Our btc wallet is always actual and the same, so send as quickly as it possible.

  105. Message 105 From Victim Victim Date

    what do you mean?

  106. Message 106 From Darkside Actor / other Date

    The wallet that you see on your page is always relevant

  107. Message 107 From Victim Victim Date

    i'm here

  108. Message 108 From Victim Victim Date

    operation is in progress

  109. Message 109 From Darkside Actor / other Date

    ok

  110. Message 110 From Victim Victim Date

    be patient operation with exchanger is taking too long time

  111. Message 111 From Victim Victim Date

    please

  112. Message 112 From Darkside Actor / other Date

    How many time you need?

  113. Message 113 From Victim Victim Date

    The exchanger told me that operation should be in the morning. Now here are 20:47

  114. Message 114 From Darkside Actor / other Date

    Take in mind, that after 35 hours your price will be doubled and this action cannot be undone.

  115. Message 115 From Victim Victim Date

    we know. My mind now is about 23.3 BTC becouse operation is for that amount

  116. Message 116 From Darkside Actor / other Date

    If you don't pay tomorrow, i'll enable float rate again and don't fixed it anymore.

  117. Message 117 From Darkside Actor / other Date

    So, hurry up your exchanger.

  118. Message 118 From Darkside Actor / other Date

    Good morning! Any updates?

  119. Message 119 From Victim Victim Date

    I had a meeting scheduled with exchanger at 1PM

  120. Message 120 From Victim Victim Date

    i don't know why he 's taking time. We yesterday moved € to exchanger

  121. Message 121 From Darkside Actor / other Date

    Well, if anything, do not hesitate to write about the results

  122. Message 122 From Victim Victim Date

    we need cryptocurrency to close the deal with you and my family will be happy becouse I have to work all weekend

  123. Message 123 From Darkside Actor / other Date

    I understand you, as far as I know in Europe there are bitcoin ATMs for a long time

  124. Message 124 From Victim Victim Date

    never seen

  125. Message 125 From Darkside Actor / other Date

    https://coinatmradar.com/country/[redacted]/

  126. Message 126 From Darkside Actor / other Date

    We won't give you extra time, after 16 hours you price will be doubled, make payment faster.

  127. Message 127 From Victim Victim Date

    Hi, i'm in call with exchanger

  128. Message 128 From Victim Victim Date

    we had to wait for the transfer of the amount

  129. Message 129 From Victim Victim Date

    technica time between bank

  130. Message 130 From Victim Victim Date

    I have the document that prove that we are moving money

  131. Message 131 From Victim Victim Date

    but we need more time

  132. Message 132 From Victim Victim Date

    till monday

  133. Message 133 From Victim Victim Date

    in the week end bank do not operate

  134. Message 134 From Darkside Actor / other Date

    Send the documents.

  135. Message 135 From Victim Victim Date

    upload in progress

    IMG_20201120_152201.jpg 5.4 MB

  136. Message 136 From Victim Victim Date

    3 pages

    IMG_20201120_152152.jpg 4.8 MB

  137. Message 137 From Victim Victim Date

    last page

    IMG_20201120_152145__02__01.jpg 5.06 MB

  138. Message 138 From Darkside Actor / other Date

    Ok, added time.

  139. Message 139 From Victim Victim Date

    da you update the countdown on this page

  140. Message 140 From Victim Victim Date

    ?

  141. Message 141 From Victim Victim Date

    Time ends on 23 Nov 2020, 09:51

  142. Message 142 From Victim Victim Date

    in the morning is too eearly

  143. Message 143 From Victim Victim Date

    the bank open in the morning

  144. Message 144 From Victim Victim Date

    please set the deadline to 24 November 9 AM

  145. Message 145 From Victim Victim Date

    so we are sure than on monday close the transaction

  146. Message 146 From Darkside Actor / other Date

    Refresh the page

  147. Message 147 From Victim Victim Date

    Ok thanks

  148. Message 148 From Victim Victim Date

    Hi, we are at work.

  149. Message 149 From Darkside Actor / other Date

    Hello! We, too, how is the exchange process going?

  150. Message 150 From Victim Victim Date

    only the bank does not work on the week end

  151. Message 151 From Victim Victim Date

    the decryption tool work per single file?

  152. Message 152 From Darkside Actor / other Date

    You will receive a master (universal) decryptor for your Linux and Windows network after payment

  153. Message 153 From Victim Victim Date

    it runs recursively o per file?

  154. Message 154 From Darkside Actor / other Date

    the process works as when encrypting only in the opposite direction, we will also send all instructions, and provide support until you decrypt the all network

  155. Message 155 From Victim Victim Date

    see you tomorrow

  156. Message 156 From Darkside Actor / other Date

    Ok! Have a nice day!

  157. Message 157 From Darkside Actor / other Date

    After 17 hours your price will be doubled and we won't change it.

  158. Message 158 From Victim Victim Date

    i'm here

  159. Message 159 From Victim Victim Date

    good morning

  160. Message 160 From Victim Victim Date

    we are almost ready

  161. Message 161 From Victim Victim Date

    i'm worried about decryption process

  162. Message 162 From Victim Victim Date

    there are a lot of file on a lot of volume

  163. Message 163 From Darkside Actor / other Date

    Hello! the process of decryption is similar to the encryption process, you do not need to worry, maximum 4-5 hours and your files will be decrypted

  164. Message 164 From Victim Victim Date

    on vmware do i need to execute decryption on one host esx that is connected to all volume or do I have to execute on every single host?

  165. Message 165 From Darkside Actor / other Date

    You should upload decryptor to each esxi, set 777 permissions and run. That's all you need, after small time your esxis will be ready for work.

  166. Message 166 From Victim Victim Date

    can we test the decryption process on one single vmdk file?

  167. Message 167 From Darkside Actor / other Date

    We will send decryptor after payment and help with all. Don't worry, it's too easy.

  168. Message 168 From Victim Victim Date

    we are doing the first transaction

  169. Message 169 From Victim Victim Date

    what description in the transaction?

  170. Message 170 From Victim Victim Date

    we sent the first little amount in order to test the correct transaction

  171. Message 171 From Victim Victim Date

    it is ok?

  172. Message 172 From Darkside Actor / other Date

    we can see your transaction

  173. Message 173 From Darkside Actor / other Date

    you can send all amount

  174. Message 174 From Victim Victim Date

    ok

  175. Message 175 From Victim Victim Date

    we proceed

  176. Message 176 From Darkside Actor / other Date

    and after 3 confirmation of bitcoin network we will send you decryptors and instruction

  177. Message 177 From Victim Victim Date

    with the next trance

  178. Message 178 From Victim Victim Date

    we sent half amount

  179. Message 179 From Victim Victim Date

    please give us linux or windows decryptor now

  180. Message 180 From Darkside Actor / other Date

    we will send your decryptors only after you send us full amount.

  181. Message 181 From Darkside Actor / other Date

    we are waiting for next part

  182. Message 182 From Victim Victim Date

    one moment

  183. Message 183 From Victim Victim Date

    sent

  184. Message 184 From Darkside Actor / other Date

    ok, we can see your transaction

  185. Message 185 From Darkside Actor / other Date

    waiting for 3 confirmation and then send you decryptors

  186. Message 186 From Victim Victim Date

    we are waiting for decryptor

  187. Message 187 From Darkside Actor / other Date

    Windows:

    The decryptor works in 2 modes: 1. GUI 2. Console

    Three functions are available in GUI mode: 1. "DECRYPT ALL" - search and decrypt ALL encrypted files on the local PC and on network resources (Shares), where this PC has access. 2. "DECRYPT FOLDER" - decrypts files in the specified folder, which you can select in the "Browse for folders" window or drag and drop the folder into the decryptor window. 3. "DECRYPT ONE FILE" - decrypts a single file, which you can open in the "Open" window or drag and drop the encrypted file into the decryptor window.

    IMPORTANT! Extension of encrypted files may not coincide with the extension of files, which the decryptor suggests to open! To open encrypted files with other extensions, in the "Open" window select, in the lower right corner of "All Files (*. *)" or just drag and drop the given file into the decryptor window. File extension does not affect the decryption of file!

    Console mode has two parameters: 1. "-all" - search and decrypt ALL encrypted files on the local PC and on network resources (Shares), where this PC has access. You can also use Group Policy to quickly decrypt your entire network. 2. "-path" - decrypts files in the specified folder or a single file. 3. Dragging and dropping an encrypted file or folder with encrypted files onto the decryptor file. In this mode, the console window will open automatically, which will display the decryption process.

    Command line examples: > decryptor.exe -all > decryptor.exe -path C:\Folder > decryptor.exe -path C:\Folder\file.txt.[redacted]

    win_decryptor.exe 76.5 kB

  188. Message 188 From Victim Victim Date

    linux decryptor works alsa per files?

  189. Message 189 From Victim Victim Date

    also

  190. Message 190 From Darkside Actor / other Date

    linux decryptor decrypts all system, it cant decrypt certain files

  191. Message 191 From Victim Victim Date

    may I ran on host that see all encrypted volume?

  192. Message 192 From Darkside Actor / other Date

    just run the decryptor on each esxi, that's all, you don't need to do anything anymore

  193. Message 193 From Darkside Actor / other Date

    after decryption you can use your vms as before that

  194. Message 194 From Victim Victim Date

    we are at work

  195. Message 195 From Darkside Actor / other Date

    Linux decryption instruction: 1. Upload decryptor to esxi. 2. Set run permissions: chmod 777 decryptor 3. Run decryptor:./decryptor

    jump_decryptor.out 2.38 MB

  196. Message 196 From Darkside Actor / other Date

    Use this one decryptor for you esxi

  197. Message 197 From Victim Victim Date

    what is the difference?

  198. Message 198 From Victim Victim Date

    the decryptor did not decrypt some file

  199. Message 199 From Victim Victim Date

    on esx

  200. Message 200 From Darkside Actor / other Date

    Try the last decryptor.

  201. Message 201 From Darkside Actor / other Date

    Which file was not decrypted? Give more information.

  202. Message 202 From Victim Victim Date

    /vmfs/volumes/[redacted]/[redacted]_RM_03/[redacted]_RM_03_1-flat.vmdk.darkside /vmfs/volumes/[redacted]/WD_[redacted]/WD_[redacted]-flat.vmdk.darkside /vmfs/volumes/[redacted]/V185E016/V185E016-flat.vmdk.darkside /vmfs/volumes/[redacted]/V157E016/V157E016_1-flat.vmdk.darkside /vmfs/volumes/[redacted]/V066E016 - [redacted]/V066E016 - [redacted]_1-flat.vmdk.darkside /vmfs/volumes/[redacted]/V079E016 - [redacted]/V079E016 - [redacted]-flat.vmdk.darkside /vmfs/volumes/[redacted]/V195E016/V195E016_1-flat.vmdk.darkside /vmfs/volumes/[redacted]/V000REPP/V000REPP_1-flat.vmdk.darkside /vmfs/volumes/[redacted]/V000PAS2/V000PAS2_1-flat.vmdk.darkside /vmfs/volumes/[redacted]/V060E016/V060E016-flat.vmdk.darkside /vmfs/volumes/[redacted]/V000TS1P_2012/V000TS1P_2012-flat.vmdk.darkside /vmfs/volumes/[redacted]/V144E016/V144E016-flat.vmdk.darkside /vmfs/volumes/[redacted]/V189E016/V189E016-flat.vmdk.darkside /vmfs/volumes/[redacted]/V067E016/V067E016-flat.vmdk.darkside /vmfs/volumes/[redacted]/V000AMQP/V000AMQP-flat.vmdk.darkside /vmfs/volumes/[redacted]/V000AMMP/V000AMMP_3-flat.vmdk.darkside /vmfs/volumes/[redacted]/[redacted] - ArcGis DataStore/[redacted] - ArcGis DataStore-flat.vmdk.darkside

  203. Message 203 From Darkside Actor / other Date

    have other files been decrypted? Are virtual machines working?

  204. Message 204 From Darkside Actor / other Date

    Use the last decryptor. He will decrypt them.

  205. Message 205 From Victim Victim Date

    i will try the other decryptor becouse when i try to start [redacted] seems that a disk is missing

  206. Message 206 From Darkside Actor / other Date

    Try the last one and write to me.

  207. Message 207 From Victim Victim Date

    [START #11] File Path.........../vmfs/volumes/[redacted]/[redacted]_RM_03/[redacted]_RM_03_1-flat.vmdk.darkside [INFO] File Size................0mb (4096 Bytes) [ERROR] File Too Small, Ignored

  208. Message 208 From Darkside Actor / other Date

    What is the size of this file? Problem with one file or multiple?

  209. Message 209 From Victim Victim Date

    42

  210. Message 210 From Victim Victim Date

    seems that some filese were modified and disk size of the VM was set to 0

  211. Message 211 From Victim Victim Date

    so the VM does not start

  212. Message 212 From Darkside Actor / other Date

    what 42?

  213. Message 213 From Victim Victim Date

    42 useful file was not decrypted

  214. Message 214 From Darkside Actor / other Date

    and how much was decrypted?

  215. Message 215 From Victim Victim Date

    a lot

  216. Message 216 From Darkside Actor / other Date

    If the reason for the non-decryption is that there is 0 size, then I cannot help you. The decryptor cannot decrypt what is not. Check all file sizes and tell me them. When you tried to start virtual machines, the hypervisor could damage the encrypted files. I mean before you got the decryptor.

  217. Message 217 From Darkside Actor / other Date

    Are you having a problem with virtual machines on the same hypervisor? or at all?

  218. Message 218 From Victim Victim Date

    we are having some problem

  219. Message 219 From Darkside Actor / other Date

    answer the questions so that I could understand what to tell you.

  220. Message 220 From Victim Victim Date

    the probelm is on esx

  221. Message 221 From Victim Victim Date

    Task name Power On virtual machine Target WD_[redacted] Status File /vmfs/volumes/[redacted]/WD_[redacted]/WD_[redacted].vmdk was not found

  222. Message 222 From Darkside Actor / other Date

    Look through ssh. Do you have a file?

  223. Message 223 From Victim Victim Date

    have a file of 4K with.darkside extension

  224. Message 224 From Victim Victim Date

    we lost some vm

  225. Message 225 From Victim Victim Date

    sigh!

  226. Message 226 From Darkside Actor / other Date

    The decryptor checks all checksums, it could not damage virtual machines. This is the first time that a client talks about problems. Did you check the sized before decryption?

  227. Message 227 From Darkside Actor / other Date

    How many virtual machines have you failed to recover? Were they on the same esxi?

  228. Message 228 From Darkside Actor / other Date

    You showed me a log in which the decryptor is trying to decrypt empty files. So the problem arose before decryption. Why so, I can not answer you, there can be a lot of reasons.

  229. Message 229 From Darkside Actor / other Date

    If you have any other problems with decryption - I will help you, just give me not empty files.

  230. Message 230 From Victim Victim Date

    the empty file has data of creation on 15Nov in the night

  231. Message 231 From Victim Victim Date

    i don't know why

  232. Message 232 From Victim Victim Date

    there is a format job runnin

  233. Message 233 From Victim Victim Date

    I need your little but useful help. On veem the volume where we have the backup, this morning was accessible but now the volume is RAW.

  234. Message 234 From Darkside Actor / other Date

    I don't quite understand what you mean

  235. Message 235 From Victim Victim Date

    the tool that you used to encrypt our backup. At the end of encrypion does it do disprutive action?

  236. Message 236 From Darkside Actor / other Date

    No, it doesn't. If backups are on Windows - use the Windows decryptor.

  237. Message 237 From Darkside Actor / other Date

    Never interrupt the decryption process by closing the program manually. The program may freeze during decryption, this is normal.

  238. Message 238 From Victim Victim Date

    Hi.

  239. Message 239 From Victim Victim Date

    we trusted in you

  240. Message 240 From Victim Victim Date

    but we need some files that miss

  241. Message 241 From Darkside Actor / other Date

    We gave you decryptors and they work, if you have problems with them, I will help you.

  242. Message 242 From Darkside Actor / other Date

    Before buying decryptors, you saw that some files were empty and you could not pay.

  243. Message 243 From Darkside Actor / other Date

    We fulfilled our part of the deal, I don't know why you have empty files. You didn't even tell me how many there are.