File extension

Ransomware with .pceqajv file extension

Did you find ransom note? If yes, what is the real name ransom note?

Can you provide (copy-paste) the ransom note content in your next reply?

All files encrypted with Magniber ransomware 2022 will have a 7-10 random character extension (.cyvpbwzfv, .lpdyefulm, .yqiidt, .zxvdfcyyz) appended to end of encrypted data file name and will usually leave files (ransom notes) named README.html as explained here by Amigo-A (Andre Ivanov).

Yes, there is ransom note with name README.html. Below is the contents of the ransom note:

ALL YOUR PHOTOS, DATABASES AND OTHER IMPORTANT FILES HAVE BEEN ENCRYPTED!
================================================= ===============================================
Your files are NOT damaged! Your files are modified only. This change is reversible.

The only way to decrypt your files is to receive the private key and the decryption program.

Any attempt to restore your files with the third party software will be fatal for your files!
================================================= ===============================================
To receive the private key and decryption program, follow the instructions below:

1. Download ‘Tor Browser’ from https://www.torproject.org/ and install it.

2. In the ‘Tor Browser’, open your personal page here:

http://ee9cbcf00pceqajv.w3brviquj2velzgwvfu7gkzhrh6h4l42ulzsnnmyxrk5ip4hp7faaaqd.onion/pceqajv

To note! This page is only available through ‘Tor Browser’.
================================================= ===============================================
You can also use temporary addresses on your personal page without using the “Tor Browser”:

http://ee9cbcf00pceqajv.bestgun.info/pceqajv

http://ee9cbcf00pceqajv.muchbe.info/pceqajv

http://ee9cbcf00pceqajv.maymess.info/pceqajv

http://ee9cbcf00pceqajv.cryless.info/pceqajv

To note! There are temporary addresses! They will be available for a limited time!