All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] Data leak [+]
First of all we have uploaded more then 70 GB archived data from your file server and SQL server
Example of data:
- Accounting
- Finance
- Personal Data
- Banking data
- Confidential files
And more other...
Our blog:
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/
Read what happens to those who do not pay.
We are ready:
- To provide you the evidence of stolen data
- To give you universal decrypting tool for all encrypted files.
- To delete all the stolen data.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7258
svc
svc$
vss
sophos
mepocs
backup
sql
memtas
veeam
Extracted
Path
C:\6940r65b-readme.txt
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 6940r65b.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] Data leak [+]
First of all we have uploaded more then 70 GB archived data from your file server and SQL server
Example of data:
- Accounting
- Finance
- Personal Data
- Banking data
- Confidential files
And more other...
Our blog:
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/
Read what happens to those who do not pay.
We are ready:
- To provide you the evidence of stolen data
- To give you universal decrypting tool for all encrypted files.
- To delete all the stolen data.
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/89829C75164FEAA2
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/89829C75164FEAA2
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
