All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
We downloaded more then 60GB sensitive data from you PDC file server, include your clients documentation.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
6420
Extracted
Path
C:\9y7ca4h9u3-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 9y7ca4h9u3.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
We downloaded more then 60GB sensitive data from you PDC file server, include your clients documentation.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/2831B79AE83390C4
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/2831B79AE83390C4
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
GaS64BnrJdb2N6MxnSR/ha9h0R6vHprS+5e4F1CtjtsL+4pHk0SutzHo3ZxxiW8u
i4lpnOKRn30wemIQnw1Py6wihwetqujOeeW0FhXQEOhqBgVRQWt74+ump8xnVPgx
jubs6fFVP1J8/LsqOiSMCe9ki3K6Ag4Hbsq9F3lrzCsrnyee6+MHM4oU3ri1tlrL
kr8586m07qbPg6wM1Swv2hqhH3Lxqpvs4K5Z5J/dTEfzVOpTl5vKfRMCM9/7ffyC
QKevF3knUwhGJ+PnPykQxB7TO+aXrEKm+94LYM8wqVsFqkv7mCwuj9fjuGyCvzw0
Q/t1YoSsCMNvXApg/i6+IYtFu7lwpCv094SXlnmYcHEA4QN4ix8GC84KAxr6RoSO
x0KOpYZ78IcxTYYuPis9sqQGEkkcGmEzVidGARXrxCeZ/4otAdGPVEB6CdHx1Lvq
0bE1OqNbIqHn0Rksht5gLUth1MuJZ+VHst0xibfy7q6QMkvJcBUqzzSthEZueq8+
rZGL/Zl0vUmZWfCwyw6U1Q4wpFAHjwQmhTjyiqSqkcTqUT58+d7xqOiM4saNR2ZY
4ZnQEd2SXSJv75yaxLDac7afJb6MsEbpistnCm7pWlzqdg6se9g9BU11PTatvF1c
tF4qMwMlWtIMBw6EX2Zkup53sWBKh3joSwV+5r9f85rSlgz2kcNOZfuKdZMcaNug
sIJy9wvrWY7eSbB+xqf5faC0Z65WyrS+P2KuLzNEul+r5RDGpBK1PNsy6AXOMPWX
7banUzEvN5JVonOkP5pNSe8iMcFzRmhdUkun0ekWe358FOVCB3jVlMeVgmHxV3cT
1xRLnd8tJm+irLgazzXPHsbpcn6NVBAsh2oEQN8vpzWbg/eVbg8jtbf/aXtqXdCS
KVSPTASAUmCNhxv1EN1hak1UVbl2us2LdD0UsYtIZHVVvai4u4Bwt84OUCRlqsR0
h4zIl7fQZ+q/mSXLYDQOjtIbl4yKYBCo83lhoS7U3SQ8DR2rRMHrELF/RYLcbcPT
QWP2wrMhYKIlHr9asDTk/KJK2pfUwoATIh33TyNJGw6MoNdpOnUsiNDkx7peuD7o
YgLGx3AWXpJWR/3RBUnY0APg9/dwQb4Ok6SpDNFUa1aSNCEqnOD3dpQIs+J3YdYz
7U3wfzNnAaaDc3KAyohnMgYa/qmMzNnTDFgV5/PQ99aJ2+RyoImniVP8sUvV5Gyu
cTYdtIqPUiieQcfLpnEAmc+OFj7Ga6SGkmOQXsXJHHmmGkCdprVdTI6N72Ev6gq5
+VIXYbRbOnzG0SRBHJoI3qpvBbGsQ8KY
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
