All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] WE ARE READY TO PUBLISH UR DATA TO PUBLIC ACCESS IF YOU NOT CONTACT US (USE TOR BROWSER TO VIEW)
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/posts/125?s=7ee0235fc7f67403393ad971dea5809e
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
5079
svc
sql
memtas
sophos
veeam
svc$
mepocs
backup
vss
Extracted
Path
C:\ghw384b2o-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension ghw384b2o.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] WE ARE READY TO PUBLISH UR DATA TO PUBLIC ACCESS IF YOU NOT CONTACT US (USE TOR BROWSER TO VIEW)
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/posts/125?s=7ee0235fc7f67403393ad971dea5809e
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/C5CCE951D8C46E63
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/C5CCE951D8C46E63
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension nd53pf25l.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] WE ARE READY TO PUBLISH UR DATA TO PUBLIC ACCESS IF YOU NOT CONTACT US (USE TOR BROWSER TO VIEW)
http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/posts/125?s=7ee0235fc7f67403393ad971dea5809e
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/BDDD6FD838E78811
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/BDDD6FD838E78811
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
