All of your files are encrypted!
Find {EXT}-read-me-KRBL.txt and follow instuctions
ransom_template
---=== Welcome Kubasta Bickford & Lorenson ===---
[+] Whats Happen? [+]
Your network has been penetrated. Your files are encrypted with strong military algorithm, and currently unavailable. You can check it: all
files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
Also, all your info copyed to our servers. If you do not take action to
contact us, the data will be published for free access to everyone. As soon as we receive the payment, all data will be deleted from our servers.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities -
nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you
can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will
lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Contact with us in chat on website. You have 3 days.
If you need more time to make a decision and collect money for payment - inform the support chat about this.
[+] How will the decryption process proceed after payment? [+]
After payment we will send to you our scanner-decoder program and detailed instructions for use.
With this program you will be able to decrypt all your encrypted files.
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions -
its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for
restoring, but please should not interfere.
!!! !!! !!!
sub
7206
svc
vss
svc$
memtas
sophos
veeam
backup
sql
mepocs
Extracted
Path
C:\6sw9v-read-me-KRBL.txt
sodinokibi
Ransom Note
---=== Welcome Kubasta Bickford & Lorenson ===---
[+] Whats Happen? [+]
Your network has been penetrated. Your files are encrypted with strong military algorithm, and currently unavailable. You can check it: all
files on your system has extension 6sw9v.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
Also, all your info copyed to our servers. If you do not take action to
contact us, the data will be published for free access to everyone. As soon as we receive the payment, all data will be deleted from our servers.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities -
nobody will not cooperate with us. Its not in our interests. To check the ability of returning files, You should go to our website. There you
can decrypt one file for free. That is our guarantee. If you will not cooperate with our service - for us, its does not matter. But you will
lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/F4DE6354A5D3A379
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/F4DE6354A5D3A379
Contact with us in chat on website. You have 3 days.
If you need more time to make a decision and collect money for payment - inform the support chat about this.
[+] How will the decryption process proceed after payment? [+]
After payment we will send to you our scanner-decoder program and detailed instructions for use.
With this program you will be able to decrypt all your encrypted files.
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions -
its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for
restoring, but please should not interfere.
!!! !!! !!!
