All of your files are encrypted!
Find {EXT}-read-me.txt and follow instuctions
ransom_template
---=== Welcome Churchill Corporate Services Inc., IT Vortex LLC, Nest Seekers LLC ===---
[+] Whats Happen? [+]
Your internal network has been penetrated. Your files are encrypted with strong military algorithm, and currently unavailable. You can check it: all
files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
Also, all your business info copyed to our servers. Personal data of your patient and business contacts extracted. If you do not take action to
contact us, the data will be published fo free access everyone. As soon as we receive the payment, all data will be deleted from our servers.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities -
nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you
can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will
lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Contact with us in chat on website. You have 3 days.
If you need more time to make a decision and collect money for payment - inform the support chat about this.
[+] How will the decryption process proceed after payment? [+]
After payment we will send to you our scanner-decoder program and detailed instructions for use.
With this program you will be able to decrypt all your encrypted files.
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions -
its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for
restoring, but please should not interfere.
!!! !!! !!!
sub
4874
Extracted
Path
C:\7f1j0g-read-me.txt
Family
sodinokibi
Ransom Note
---=== Welcome Churchill Corporate Services Inc., IT Vortex LLC, Nest Seekers LLC ===---
[+] Whats Happen? [+]
Your internal network has been penetrated. Your files are encrypted with strong military algorithm, and currently unavailable. You can check it: all
files on your system has extension 7f1j0g.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
Also, all your business info copyed to our servers. Personal data of your patient and business contacts extracted. If you do not take action to
contact us, the data will be published fo free access everyone. As soon as we receive the payment, all data will be deleted from our servers.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities -
nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you
can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will
lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/CF32D7AE1EA1DA6A
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/CF32D7AE1EA1DA6A
Contact with us in chat on website. You have 3 days.
If you need more time to make a decision and collect money for payment - inform the support chat about this.
[+] How will the decryption process proceed after payment? [+]
After payment we will send to you our scanner-decoder program and detailed instructions for use.
With this program you will be able to decrypt all your encrypted files.
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions -
its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for
restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome Churchill Corporate Services Inc., IT Vortex LLC, Nest Seekers LLC ===---
[+] Whats Happen? [+]
Your internal network has been penetrated. Your files are encrypted with strong military algorithm, and currently unavailable. You can check it: all
files on your system has extension 1c11jw11.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
Also, all your business info copyed to our servers. Personal data of your patient and business contacts extracted. If you do not take action to
contact us, the data will be published fo free access everyone. As soon as we receive the payment, all data will be deleted from our servers.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities -
nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you
can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will
lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/EEC87A233A863CAD
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/EEC87A233A863CAD
Contact with us in chat on website. You have 3 days.
If you need more time to make a decision and collect money for payment - inform the support chat about this.
[+] How will the decryption process proceed after payment? [+]
After payment we will send to you our scanner-decoder program and detailed instructions for use.
With this program you will be able to decrypt all your encrypted files.
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions -
its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for
restoring, but please should not interfere.
!!! !!! !!!
