All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] Data leak [+]
First of all we have uploaded more then 200 Gb archived data from your file server and SQL server
Example of data:
- Full financial information
- Accounting data
- HR
- Scans of docs
- Confidential files
And more other...
Our blog:
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/
Read what happens to those who do not pay.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DON'T try to change files by yourself, DON'T use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
8020
svc
mepocs
sql
svc$
sophos
backup
memtas
vss
veeam
Extracted
Path
C:\be1g8-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension be1g8.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] Data leak [+]
First of all we have uploaded more then 200 Gb archived data from your file server and SQL server
Example of data:
- Full financial information
- Accounting data
- HR
- Scans of docs
- Confidential files
And more other...
Our blog:
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/
Read what happens to those who do not pay.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/BB570B2F2E8BCAC1
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/BB570B2F2E8BCAC1
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DON'T try to change files by yourself, DON'T use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
