All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] Data leak [+]
First of all we have uploaded more then 200 Gb archived data from your file server and SQL server
Example of data:
- Full financial information
- Accounting data
- HR
- Scans of docs
- Confidential files
And more other...
Our blog:
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/
Read what happens to those who do not pay.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DON'T try to change files by yourself, DON'T use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
8020
svc
mepocs
sql
svc$
sophos
backup
memtas
vss
veeam
Extracted
Path
C:\di4l0u-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension di4l0u.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] Data leak [+]
First of all we have uploaded more then 200 Gb archived data from your file server and SQL server
Example of data:
- Full financial information
- Accounting data
- HR
- Scans of docs
- Confidential files
And more other...
Our blog:
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/
Read what happens to those who do not pay.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/75D30EC5588FDE81
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/75D30EC5588FDE81
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DON'T try to change files by yourself, DON'T use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
