All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
We downloaded more then 515 GB sensitive data from your file servers, including internal company data and clients files and documents. We are ready to publish all data if you do not contact us!
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7353
svc
vss
veeam
sql
mepocs
memtas
sophos
svc$
backup
Extracted
Path
C:\855g6c2-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 855g6c2.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
We downloaded more then 515 GB sensitive data from your file servers, including internal company data and clients files and documents. We are ready to publish all data if you do not contact us!
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/61773AFBBE4DF929
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/61773AFBBE4DF929
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
