All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
2415
svc
VeeamDeploymentService
BackupExecRPCService
VeeamTransportSvc
stc_raw_agent
VSNAPVSS
BackupExecAgentAccelerator
BackupExecVSSProvider
MVArmor
BackupExecJobEngine
MSExchange
sophos
AcronisAgent
svc$
vss
PDVFSService
WSBExchange
AcrSch2Svc
veeam
BackupExecAgentBrowser
MSExchange$
BackupExecDiveciMediaService
CAARCUpdateSvc
CASAD2DWebSvc
VeeamNFSSvc
sql
mepocs
backup
memtas
MSSQL$
ARSM
MSSQL
MVarmor64
BackupExecManagementService
bedbg
Extracted
Path
C:\189qz1d589-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension 189qz1d589.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/CC63D271CF22A3AE
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/CC63D271CF22A3AE
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
f9jU0KJlXmCQbZkRqOBJ0qcIz2FKQWhcW6cXKapAuuxi0btpJH4ygsvxkZyQ78IQ
Fyk0JBBqGCEQddTpGrg/5Ran7Sti35wlXiV1VU3/7mWj1/r4PqU8dpnU4kXpdtOE
56jWMFwXpxEdJ076tHFv2dCYGELPsio3HN9VDkboVk9wzMtqmCOSOnXXbxIVDu7x
5zi5w6TqGhmNF316mjBtRgViMgmiMWLkOHRYBvQj8/8Mo3P2FO3Vm0whjq8BM7EF
Dz+M3d8TWAJmZdexytWE5duiIsq8WUURWQmyGaFZWB+d5/Py5YL0xTwHk+NpCq9i
MYG/3ACG1SxuQFsbcn0LU1FGBz2aahxlu8D9nP4LkLFv9/baPW8tm/JvUhbZ8G12
G60kQpiKMAT9oPD7QmZtdNZMXpBsYGLrkITk+k3wMqbHoQCgIqrz5+Y3fre0Qb+6
DY7+ji41rdwTykYKDwQnjWzOZO6EsEyy+vknTXAxU5L0V/YVTgqvKt88TU5DcNhT
OqfI0MJZfhySK3N/cpi1IJFOF5PXBf7hGzAy6T4Yab4pbcN1SNTXHlyOiptlSWEL
avyFjPNPa/W85UtS2xJV5UMkLI8lhBBMr9QSjtGtl7ciW5gf7gRZpXqHuKvyk+aF
Fhs7X3ASCkimklDGaotHIg3Zy195Nikvbqf0tuP0byM9dymDzYw3NFi05ChaE6VR
kxp/nFK0nblkLVteMeyGxrj1xZBqrUdmIXdu0GoX7cLs+xh1J+1R8hWf3Oly0qpv
RSTP9zUxAlYB13AfBlxs4a7ysYGWKs5I1l1PnwT3XPYwLtIKev6SSoVR115fB/X3
GX1J0uW0q36CB5h4NMMdcWP+qOxa4rX37ZL5V9WN9xo4y5TUzi4T2SFObeNp3IUk
lbhP3GXOK+/cLgMgTt+6Lle38w3XzEvK1lzvUJR8mz9glnOubljlgA7dE0r57jMd
bIIKbDNJheothJdqCvQbOdDAKt7ogb0HHED0rWmuDtLVH5dREI4hzS7kahOvlWoL
kpcU6j9KnwNlDzNnYEe/Sp2Fw7svPyqCERZ4ZkoEyl9Rxgm30tYdOntAyFjbjIy5
7eohUfXYKFJCN3Qt0KGoAaM15M5otBbf15lqfTBMX1HzuvtPsqJ/kJBve1/9W1F3
DUoF9A==
Extension name:
189qz1d589
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
