All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
3) If you still have problems accessing the site, you can write to us at: revilcry@pm.me, indicating the external IP address, country, key {KEY} and extension {EXT}
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
4375
Extracted
Path
C:\6u776v6a-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 6u776v6a.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/7422679EF7CF3BFF
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/7422679EF7CF3BFF
Warning: secondary website can be blocked, thats why first variant much better and more available.
3) If you still have problems accessing the site, you can write to us at: revilcry@pm.me, indicating the external IP address, country, key PaERi8D1owhe2e7+PYkveFWOXktfyXqo8Ob2/vwo9/3bLQpuo+ijhxOCltOUTdD8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and extension 6u776v6a
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
