All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
1112
svc
mepocs
memtas
sql
backup
vss
sophos
svc$
veeam
Extracted
Path
C:\1ytqtwr-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension 1ytqtwr.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/F285E0A74A935666
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/F285E0A74A935666
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
1ytqtwr
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension bj8093n.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/958CFDB0D569DB4D
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/958CFDB0D569DB4D
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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==
Extension name:
bj8093n
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
