All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] WE ARE READY TO PUBLISH UR DATA TO PUBLIC ACCESS IF YOU NOT CONTACT US (USE TOR BROWSER TO VIEW)
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/posts/125?s=7ee0235fc7f67403393ad971dea5809e
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
5079
svc
sql
memtas
sophos
veeam
svc$
mepocs
backup
vss
Extracted
Path
C:\97314g4l2-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 97314g4l2.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] WE ARE READY TO PUBLISH UR DATA TO PUBLIC ACCESS IF YOU NOT CONTACT US (USE TOR BROWSER TO VIEW)
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/posts/125?s=7ee0235fc7f67403393ad971dea5809e
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/E06E2F8F9371BAAE
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/E06E2F8F9371BAAE
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
