---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension e8h7w.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
We downloaded more then 60GB sensitive data from you PDC file server, include your clients documentation.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/8FD7A59706A4C1F4
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/8FD7A59706A4C1F4
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
We downloaded more then 60GB sensitive data from you PDC file server, include your clients documentation.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
6420
svc
backup
memtas
svc$
veeam
vss
sql
sophos
mepocs
Signatures
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
