All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] Data leak [+]
First of all we have uploaded more then 80 GB archived data from \\UDATA.
Example of data:
- Accounting
- Finance
- Personal Data
- Banking data
- Strategic sourcing
- Management
- projects, plans
- Confidential files
And more other...
Our blog:
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/
Read what happens to those who do not pay.
We are ready:
- To provide you the evidence of stolen data
- To give you universal decrypting tool for all encrypted files.
- To delete all the stolen data.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
6815
svc
mepocs
sophos
backup
veeam
sql
svc$
memtas
vss
Extracted
Path
C:\3j428mt-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 3j428mt.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] Data leak [+]
First of all we have uploaded more then 80 GB archived data from \\UDATA.
Example of data:
- Accounting
- Finance
- Personal Data
- Banking data
- Strategic sourcing
- Management
- projects, plans
- Confidential files
And more other...
Our blog:
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/
Read what happens to those who do not pay.
We are ready:
- To provide you the evidence of stolen data
- To give you universal decrypting tool for all encrypted files.
- To delete all the stolen data.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/B5371DADB7A7051A
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/B5371DADB7A7051A
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
