All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on you computer has expansion {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
96
svc
vss
mepocs
veeam
memtas
backup
svc$
sophos
sql
Extracted
Path
C:\g2q3ul99-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on you computer has expansion g2q3ul99.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/A300D28DADA30046
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/A300D28DADA30046
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
g2q3ul99
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on you computer has expansion 48557gg6b.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/3CDE368758C84D53
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/3CDE368758C84D53
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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==
Extension name:
48557gg6b
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
