All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
2415
svc
VeeamDeploymentService
BackupExecRPCService
VeeamTransportSvc
stc_raw_agent
VSNAPVSS
BackupExecAgentAccelerator
BackupExecVSSProvider
MVArmor
BackupExecJobEngine
MSExchange
sophos
AcronisAgent
svc$
vss
PDVFSService
WSBExchange
AcrSch2Svc
veeam
BackupExecAgentBrowser
MSExchange$
BackupExecDiveciMediaService
CAARCUpdateSvc
CASAD2DWebSvc
VeeamNFSSvc
sql
mepocs
backup
memtas
MSSQL$
ARSM
MSSQL
MVarmor64
BackupExecManagementService
bedbg
Extracted
Path
C:\k5t4o4-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension k5t4o4.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/93F84E53B910D35B
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/93F84E53B910D35B
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
k5t4o4
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
