---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension mc7uc.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] Attention!!! [+]
Also your private data was downloaded.
We will publish it in case you will not get in touch with us asap
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/B3F777BD8F7650AE
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/B3F777BD8F7650AE
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] Attention!!! [+]
Also your private data was downloaded.
We will publish it in case you will not get in touch with us asap
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7180
svc
mfewc
ds_agent
kaseyaagentendpoint
ds_monitor
huntressagent
ntrtscan
dssvc
kavfs
veeam
backup
kaendchips
sophos
ltservice
memtas
sql
storagecraft
azurea
altivrm
huntressupdater
ltsvcmon
kaseyaagent
teamviewer
bedbg
tmlisten
sppsvc
msdtsserver
mcafee
masvc
auservice
code42service
altiphoneserv
altictproxy
reportserver
vipreaapsvc
ssastelemetry
telemetryserver
amsp
altiftpuploader
threadlocker
sbamsvc
tmbmserver
ofcservice
mbamservice
svc$
mepocs
protectedstorage
viprepplsvc
adsync
altiback
savservice
svcgenerichost
altaro
savadminservice
msseces
klnagent
tmccsf
swi_filter
ssistelemetry
mfevtp
vss
mfemms
psqlwge
ds_notifier
macmnsvc
Signatures
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
