All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
=========Attention!!!=========
Also your private data was downloaded. We will publish it in case you will not get in touch with us asap.
==============================
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7089
svc
AzureADConnectAuthenticationAgent
memtas
"swi_service"
SQLTELEMETRY$SQLEXPRESS
SSASTELEMETRY
Microsoft.exchange.store.worker.exe
mfemms
Telemetryserver
"Sophos System Protection Service"
Altaro.OffsiteServer.Service.exe
AltiPhoneServ
bedbg
VeeamMountSvc
Altaro.SubAgent.N2.exe
"SQLServer Analysis Services (MSSQLSERVER)"
SQLTELEMETRY$MSGPMR
HuntressAgent
"ofcservice"
MSSQL$QM
SQLAgent$MSGPMR
"SAVService"
sppsvc
MySQL
masvc
KAENDCHIPS906995744173948
AzureADConnectHealthSyncMonitor
MSSQL$SQLEXPRESSADV
TMBMServer
Altaro.SubAgent.exe
ds_notifier
VeeamDeploymentService
klnagent
veeam
msseces
LTSvcMon
MSSQL$SQLEXPRESS
MSSQL$HPWJA
"Sophos Web Control Service"
ADSync
MSSQLFDLauncher$SQLEXPRESS
"Sage.NA.AT_AU.Service"
MSSQLTESTBACKUP02DEV
KACHIPS906995744173948
Amsp
"ds_agent"
mfevtp
SQLAgent$SQLEXPRESS
"swi_filter"
"Sage 100cloud Advanced 2020 (9920)"
ALTIVRM
vss
SQLBrowser
"Sophos MCS Client"
"SophosFIM"
MSSQLFDLauncher
MBAMService
"ThreadLocker"
VeeamEndpointBackupSvc
SQLSERVERAGENT
AltiBack
"SAVAdminService"
tmlisten
SBAMSvc
AltiCTProxy
AzureADConnectAgentUpdater
"SQLServer Reporting Services (MSSQLSERVER)"
mysqld
ds_monitor
sql
ofcservice
"Sophos Clean Service"
mfewc
LTService
"Amsp"
"TeamViewer"
BackupExecAgentAccelerator
mepocs
VeeamNFSSvc
"Sophos Safestore Service"
MsDtsServer120
svcGenericHost
MsDtsServer110
AUService
backup
SQLTELEMETRY
AzureADConnectHealthSyncInsights
MsDtsServer130
ReportServer
Altaro.HyperV.WAN.RemoteService.exe
ProtectedStorage
SSISTELEMETRY130
VeeamTransportSvc
Altaro.Agent.exe
MSSQLSERVER
sqlservr
KaseyaAgent
"SQLServer Integration Services 12.0"
ntrtscan
"StorageCraft Raw Agent"
TmCCSF
sophos
ds_agent
MSSQLServerADHelper100
VeeamHvIntegrationSvc
"Sage 100c Advanced 2017 (9917)"
"SntpService"
McAfeeFramework
"StorageCraft ImageReady"
VSS
KaseyaAgentEndpoint
HuntressUpdater
VeeamDeploySvc
"Sophos AutoUpdate Service"
"Sophos MCS Agent"
KAVFS
SQLWriter
MSSQLFDLauncher$TESTBACKUP02DEV
svc$
MSSQL$MSGPMR
psqlWGE
Altaro.DedupService.exe
"Sophos Health Service"
SQLEXPRESSADV
"ProtectedStorage"
kavfsscs
sophossps
"ds_monitor"
TeamViewer
ThreadLocker
MSSQLServerOLAPService
Altaro.OffsiteServer.UI.Service.exe
MSSQLLaunchpad$SQLEXPRESS
Code42Service
Altaro.UI.Service.exe
"Sophos File Scanner Service"
macmnsvc
"ds_notifier"
ViprePPLSvc
AltiFTPUploader
"Sophos Endpoint Defense Service"
VipreAAPSvc
DsSvc
"Sophos Device Control Service"
"StorageCraft Shadow Copy Provider"
Extracted
Path
C:\t2911pi4b-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension t2911pi4b.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
=========Attention!!!=========
Also your private data was downloaded. We will publish it in case you will not get in touch with us asap.
==============================
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/8DA9EA35F9F7D01B
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/8DA9EA35F9F7D01B
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension e6a5y8q.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
=========Attention!!!=========
Also your private data was downloaded. We will publish it in case you will not get in touch with us asap.
==============================
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/B4AC938D2BD835E2
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/B4AC938D2BD835E2
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 2gy6o9.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
=========Attention!!!=========
Also your private data was downloaded. We will publish it in case you will not get in touch with us asap.
==============================
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/73F1464F44EB8746
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/73F1464F44EB8746
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
