All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\6634ch546-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 6634ch546.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/1D195563C6D5E22B
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/1D195563C6D5E22B
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
