All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\7x4038fg-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 7x4038fg.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/7E9CF4E9EB7790DB
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/7E9CF4E9EB7790DB
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
