All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. CDHFUND. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
2036
svc
memtas
mepocs
vss
sophos
backup
svc$
veeam
sql
Extracted
Path
C:\69661o-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. CDHFUND. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension 69661o.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/79D62FE7595E234A
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/79D62FE7595E234A
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
69661o
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
