All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
8141
svc
vss
veeam
svc$
backup
mepocs
sophos
sql
memtas
Extracted
Path
C:\h5z1g-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension h5z1g.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/8A466883258DF8D2
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/8A466883258DF8D2
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
v+pEkcCN+cQO2OWyXSexcCudt9VchtqEeUIyVvb5CpXCTsjzMrni2ex1irryviqz
Ch76UaPeBUB9uLXbW8eeAm94JNJW+CVunefocnUDZGVTEYDQA/xu++iHDp6jHxkC
S0RPB7DyxMMC1hTUr5peOcm5MWZBPqXdrDw7ymkPfngyNA+OYIzdR/kJZv5pnuck
ZPcE8bkpCNaw4hcy+bTdo/nsKJseU+VbTq+epsjy2xxczEtP2PuOha0epgJNZN4V
Zbua0w80J0zRxfqc+QIb3TmQXTfH3k9PmgBrGlE/3wy8FzPaWzxE0/zAtSDSiOP/
fRPrAAQ93t/vkRanggt6XdlSTUwFpMO+9WW6/JMlL+27DAdDc/eGYtMALVP5FXNg
PkGppj7vIHwBWK2WKyZYl7SrA0myOf0TN9lP1lNJWoKVkDSvSoYHUhWkrTsvG0ss
34aMF6IThdNbVRVyFYSMGDsY02yKF+IgykEUkLiPlPvNlPixRXBy4IaVoqyEEf7g
dA+xzlkqx6SuMsiZJZNMBn/9/OSyyeX1P1CvyZXLu+Ua3N1lBJWSeoqeki/WOycX
PV2Za4oevvPEbz47iqh4ILFxZSTs9P9XEIf9yZX6PVcgrln5LO2iwZHOtY+dlMRX
ec4jnwFhq5DTW+x8frswS0O7b435DNVRhfVlqJQ15fc36vObYlBaIRMVbJ1bMw6Z
lU68w0XP+TKF5FSnfhlXxuMpIg0iSdWlOEvo00GyPWlvwBxMXD7wJ9GD+ExhdtqO
GgM//F1E1gP0y+m6t3rgHoah5cmUnn8nQgjCo+0whM3U0+Joi8SfaxdLp/Uga5I+
2kUJRa4Cbz2YJvU6uZDp5bG5Lk86LBcLy5EO9AxgeVtZXMl5Wssog2TYoLIY/mDE
NHq4FhXs0d6FQpMSk87NGEvV4Q0s0VOO0cX/HcljjZJR1kwoe77/FcvLvx0tQeBT
4gnyJ4sWN3R0O5AjM3YgZafa77ImCudXPc0vtENiHtdg2qS9LIioYf0UQ1VoknAv
8WLME3lAZ+wzgZZ7Zb9d5IgCVJpOI3Dv4t3xT+Y8nfEUKW0uVTiFQsepQCg9pBgi
VIuVMCxe1hAxRkFtH4OeOM2hgOw3WtrzQviuyeEA7Bb6M/mAnPQRcqMUZZO2JAwb
FitCCNInJLtzYX92STgYuVMMOHHnQx8RYfCfLYDs7N0CU1bKIxM64epCTQdV8uQv
hsAVhETvoy1DW76IpIICsgL1dbmwwqWulNrzZzIWmkC6/1AezJTnaXF/R7kvntng
fk+EkJvKYe8XNTlC
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 96x4z9y.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/0FD3C2C76BBB6C9F
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/0FD3C2C76BBB6C9F
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
