---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 75o0s6.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] Attention!!! [+]
Also your private data was downloaded.
We will publish it in case you will not get in touch with us asap.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/0E9364C6D322A26C
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/0E9364C6D322A26C
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] Attention!!! [+]
Also your private data was downloaded.
We will publish it in case you will not get in touch with us asap.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7341
svc
ofcservice
kaseyaagentendpoint
storagecraft
savadminservice
teamviewer
amsp
klnagent
mfevtp
azurea
altivrm
vipreaapsvc
msdtsserver
kaendchips
viprepplsvc
bedbg
veeam
kaseyaagent
mfewc
memtas
huntressupdater
psqlwge
sppsvc
threadlocker
mepocs
code42service
auservice
tmbmserver
sbamsvc
swi_filter
savservice
altictproxy
backup
dssvc
svc$
vss
huntressagent
sophos
ssastelemetry
protectedstorage
svcgenerichost
msseces
mfemms
ntrtscan
ds_agent
ds_notifier
altaro
ltsvcmon
reportserver
ssistelemetry
tmlisten
altiftpuploader
adsync
tmccsf
macmnsvc
mbamservice
telemetryserver
ltservice
kavfs
ds_monitor
altiphoneserv
masvc
altiback
sql
mcafee
Signatures
Sodin,Sodinokibi,REvil
Ransomware with advanced anti-analysis and privilege escalation functionality.
