All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
=========Attention!!!=========
Also your private data was downloaded. We will publish it in case you will not get in touch with us asap.
==============================
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7047
svc
ALTIVRM
mepocs
KAVFS
AzureADConnectHealthSyncMonitor
"SAVService"
psqlWGE
TmCCSF
"Sophos System Protection Service"
MsDtsServer130
VeeamTransportSvc
bedbg
"Sage.NA.AT_AU.Service"
"ProtectedStorage"
Telemetryserver
backup
"SQLServer Analysis Services (MSSQLSERVER)"
sophos
sophossps
"Sophos MCS Agent"
KACHIPS906995744173948
Code42Service
VeeamHvIntegrationSvc
veeam
Microsoft.exchange.store.worker.exe
SQLTELEMETRY$MSGPMR
ReportServer
vss
MSSQL$HPWJA
"StorageCraft Raw Agent"
MSSQLSERVER
SBAMSvc
"Sophos File Scanner Service"
AltiPhoneServ
"StorageCraft ImageReady"
VeeamDeploySvc
"SQLServer Integration Services 12.0"
McAfeeFramework
AUService
macmnsvc
"SAVAdminService"
"swi_service"
Altaro.DedupService.exe
"ds_agent"
mysqld
MBAMService
sqlservr
SQLSERVERAGENT
AzureADConnectAuthenticationAgent
MSSQL$SQLEXPRESS
ThreadLocker
MSSQLFDLauncher$TESTBACKUP02DEV
SQLAgent$SQLEXPRESS
mfemms
"Sophos MCS Client"
"Sage 100cloud Advanced 2020 (9920)"
sql
"Sage 100c Advanced 2017 (9917)"
MSSQLFDLauncher
ofcservice
KAENDCHIPS906995744173948
klnagent
SQLEXPRESSADV
Amsp
"SophosFIM"
HuntressUpdater
KaseyaAgentEndpoint
"SntpService"
memtas
ViprePPLSvc
LTService
ntrtscan
SQLTELEMETRY
TMBMServer
"Sophos Web Control Service"
VSS
"Amsp"
"SQLServer Reporting Services (MSSQLSERVER)"
Altaro.Agent.exe
VeeamMountSvc
"Sophos Health Service"
Altaro.OffsiteServer.UI.Service.exe
MSSQL$SQLEXPRESSADV
MSSQLTESTBACKUP02DEV
MSSQLServerOLAPService
kavfsscs
AltiCTProxy
ds_agent
ds_monitor
LTSvcMon
sppsvc
"Sophos Safestore Service"
mfewc
"ThreadLocker"
"Sophos AutoUpdate Service"
Altaro.SubAgent.exe
AltiBack
"swi_filter"
Altaro.UI.Service.exe
AltiFTPUploader
TeamViewer
"StorageCraft Shadow CopyProvider"
ADSync
mfevtp
DsSvc
masvc
BackupExecAgentAccelerator
Altaro.OffsiteServer.Service.exe
Altaro.SubAgent.N2.exe
VipreAAPSvc
svc$
"Sophos Device Control Service"
KaseyaAgent
VeeamDeploymentService
MSSQLServerADHelper100
MsDtsServer120
AzureADConnectHealthSyncInsights
msseces
VeeamNFSSvc
"Sophos Clean Service"
Altaro.HyperV.WAN.RemoteService.exe
"ds_monitor"
tmlisten
MySQL
MSSQL$MSGPMR
SQLBrowser
ProtectedStorage
"ds_notifier"
ds_notifier
SSISTELEMETRY130
SQLAgent$MSGPMR
"ofcservice"
"Sophos Endpoint Defense Service"
AzureADConnectAgentUpdater
MSSQLFDLauncher$SQLEXPRESS
SSASTELEMETRY
SQLWriter
MSSQLLaunchpad$SQLEXPRESS
svcGenericHost
MsDtsServer110
HuntressAgent
SQLTELEMETRY$SQLEXPRESS
"TeamViewer"
MSSQL$QM
VeeamEndpointBackupSvc
Extracted
Path
C:\0pa6980309-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 0pa6980309.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
=========Attention!!!=========
Also your private data was downloaded. We will publish it in case you will not get in touch with us asap.
==============================
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/E38FA8B6505BBB2C
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/E38FA8B6505BBB2C
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 94kpkghj09.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
=========Attention!!!=========
Also your private data was downloaded. We will publish it in case you will not get in touch with us asap.
==============================
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/4F22F43A57C5D56D
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/4F22F43A57C5D56D
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
