All of your files are encrypted!
Find {EXT}-read-me-GLOBAL.txt and follow instuctions
ransom_template
---=== Welcome Global Underground Corp ===---
[+] Whats Happen? [+]
Your network has been penetrated. Your files are encrypted with strong military algorithm, and currently unavailable. You can check it: all
files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
Also, all your info copyed to our servers. If you do not take action to
contact us, the data will be published for free access to everyone. As soon as we receive the payment, all data will be deleted from our servers.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities -
nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you
can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will
lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Contact with us in chat on website. You have 3 days.
If you need more time to make a decision and collect money for payment - inform the support chat about this.
[+] How will the decryption process proceed after payment? [+]
After payment we will send to you our scanner-decoder program and detailed instructions for use.
With this program you will be able to decrypt all your encrypted files.
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions -
its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for
restoring, but please should not interfere.
!!! !!! !!!
sub
7044
svc
vss
mepocs
svc$
sophos
veeam
backup
sql
memtas
Extracted
Path
C:\754v6cngk3-read-me-GLOBAL.txt
Family
sodinokibi
Ransom Note
---=== Welcome Global Underground Corp ===---
[+] Whats Happen? [+]
Your network has been penetrated. Your files are encrypted with strong military algorithm, and currently unavailable. You can check it: all
files on your system has extension 754v6cngk3.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
Also, all your info copyed to our servers. If you do not take action to
contact us, the data will be published for free access to everyone. As soon as we receive the payment, all data will be deleted from our servers.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities -
nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you
can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will
lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/41CE99B36C28F853
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/41CE99B36C28F853
Contact with us in chat on website. You have 3 days.
If you need more time to make a decision and collect money for payment - inform the support chat about this.
[+] How will the decryption process proceed after payment? [+]
After payment we will send to you our scanner-decoder program and detailed instructions for use.
With this program you will be able to decrypt all your encrypted files.
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions -
its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for
restoring, but please should not interfere.
!!! !!! !!!
