All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\gi5df-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension gi5df.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/D47985DD4C1063D2
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/D47985DD4C1063D2
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
