All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] Attention!!! [+]
Also your private data was downloaded.
We will publish it in case you will not get in touch with us asap.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7138
svc
swi_filter
svcgenerichost
ds_notifier
ofcservice
reportserver
auservice
storagecraft
bedbg
ds_agent
sql
huntressagent
protectedstorage
ssistelemetry
vss
sophos
mbamservice
altiftpuploader
ltservice
vipreaapsvc
mfewc
altivrm
kavfs
mepocs
kaseyaagentendpoint
kaseyaagent
ds_monitor
mfemms
altaro
dssvc
sppsvc
ntrtscan
kaendchips
amsp
telemetryserver
code42service
tmbmserver
altiback
backup
klnagent
svc$
memtas
altiphoneserv
mcafee
masvc
savadminservice
mfevtp
macmnsvc
msseces
ltsvcmon
psqlwge
azurea
veeam
huntressupdater
threadlocker
teamviewer
msdtsserver
savservice
ssastelemetry
altictproxy
viprepplsvc
sbamsvc
tmccsf
adsync
tmlisten
Extracted
Path
C:\26iu1lleyt-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 26iu1lleyt.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] Attention!!! [+]
Also your private data was downloaded.
We will publish it in case you will not get in touch with us asap.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/584BF5555F34A14E
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/584BF5555F34A14E
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
/tGLE3ygzj32Z/MXMgJH77GZrpo2TyBTA/R1RomjxICIr+FS1G+tSzxXBBMZoZHD
vqY8GGAtCkbz+xh5AU5oX6D83UesQNX29CYBiRlfuy4SPOzSb9LsqJFFnSdglFGb
x7xCo2fXrFa0O8FYiFgi7Prbtg0gUQFiyYJnYz20Jxhxrqj+leyrAliXlw17prT8
6o1QVp/JEaVslCjCHzztzr0RO6fcYeEzW5Roqg+UU37yn9WlkW6hFH1Bsf59eEa4
/QtK0U50okmiTLkKuwQdwd+VNWDREV9RdczUuVpAXtnkrbWLDwE6MG4xNxSbZdkX
b5+Pq2sSMQ2VQ4SJ7qTkUV6z03K8RdbMmBEQcXYdXNR0YC6VJHJhIyOfQ9SlN9WG
BO2l1WfEEfZVwYKa5mSwxkZB40nmnF2w7iIV1liBrFGSVG3tguxIThsK6LpI5GJC
NdEMwwATdRZWyZZjbi0L0JR3cA05N+0T9i0cXcAIw0K50JtOQnvi5SZ6nO3EX4PJ
HON1c4p/wq9l9ntmx6r/Gjip/ffpHUAiBYJ95JO92nX+1aiL6INEhYXTH3B9Rpj9
rj18pQX2fh1cdwLqH4auXAzFLlGyjtJ5ir+MSw4GgLbQTo6W9b8//OaZ+g6pYPHq
dsN5cHGKCmEsCwGpF4Z/UDD+gOPWCQs0kNpuZG1dZvPgjIJqDP1ULrtGPZtW79SS
GusiT/a4VtOl/FGlrTYm5ercuHtUmG/nv433+p5VshDGwTkaKybwj9chGEHkNPaX
cwSkU+qjnuQjwPE3mcjY+TthMiP5feqNXAxXtubc2iyUwUx98ckaAn6ooASgerA3
0je8lYCSuX0B8ob2SO8KKWSyDJkTsKEOviUMiiuyzuXPjVQPj+vo9LtWDIhD9vNG
9Q9OnXXVPOHFgqhBalH4sX7dwF/38ByFlyw2xtABVWViYRu3htx3U/dj+IXZyHB9
ohJaFWS0fPHpfNgjIdCsTLhcu/JiThYeMVWrMpTVUfn0B5JPiBEszUZkzyFSSr0D
z4phbbeFqITKJ44TqPbdPDzaIOKF5eJApbBl2DniDYzWj6vDXF5In1R/acGijiR7
8PWVwlF9Ly227+nAZID0IFuXETF/YdbpSLgJrtmSFA6+Ui57xX+ELvT8W427gWVG
DfG9B7Sd9gY/0VsmCv+HJVjQTASqVj3w9nBs5u9XftqcPgOcRUKjNZ/Foytcov76
3nV/FcmoDQVQ8ia6uNG5eIBQAGIek52UFCHWO83Nd7ECwNOx5BH5p/cAI8H2MzIH
xdDwRVFxSzjya5Px+1w=
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
