---=== Sodinokibi Ransomware ===---
All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
I suggest you read about us on the Internet, we are known as "Sodinokibi Ransomware". For example, this article:
https://www.coveware.com/blog/2019/7/15/ransomware-amounts-rise-3x-in-q2-as-ryuk-amp-sodinokibi-spread
Pay attention to that:
"How Much Data Is Decrypted with a Ransomware Decryptor?
In Q2 2019, victims who paid for a decryptor recovered 92% of their encrypted data. This statistic varied dramatically depending on the ransomware type.
For example, Ryuk ransomware has a relatively low data recovery rate, at ~ 87%, while Sodinokibi was close to 100%. "
Now you have a guarantee that your files will be returned 100 %.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available. If you have problem with connect, use strictly TOR version 8.5.5
link for download TOR version 8.5.5 here: https://filehippo.com/download_tor_browser_for_windows/
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
3413
svc
veeam
svc$
memtas
backup
mepocs
sophos
sql
vss
Extracted
Path
C:\l7xpj88j0-readme.txt
Family
ryuk
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension l7xpj88j0.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
I suggest you read about us on the Internet, we are known as "Sodinokibi Ransomware". For example, this article:
https://www.coveware.com/blog/2019/7/15/ransomware-amounts-rise-3x-in-q2-as-ryuk-amp-sodinokibi-spread
Pay attention to that:
"How Much Data Is Decrypted with a Ransomware Decryptor?
In Q2 2019, victims who paid for a decryptor recovered 92% of their encrypted data. This statistic varied dramatically depending on the ransomware type.
For example, Ryuk ransomware has a relatively low data recovery rate, at ~ 87%, while Sodinokibi was close to 100%. "
Now you have a guarantee that your files will be returned 100 %.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/A3EA993C1B088917
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/A3EA993C1B088917
Warning: secondary website can be blocked, thats why first variant much better and more available. If you have problem with connect, use strictly TOR version 8.5.5
link for download TOR version 8.5.5 here: https://filehippo.com/download_tor_browser_for_windows/
When you open our website, put the following data in the input form:
Key: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Extension name:
l7xpj88j0
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension 33394668.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
I suggest you read about us on the Internet, we are known as "Sodinokibi Ransomware". For example, this article:
https://www.coveware.com/blog/2019/7/15/ransomware-amounts-rise-3x-in-q2-as-ryuk-amp-sodinokibi-spread
Pay attention to that:
"How Much Data Is Decrypted with a Ransomware Decryptor?
In Q2 2019, victims who paid for a decryptor recovered 92% of their encrypted data. This statistic varied dramatically depending on the ransomware type.
For example, Ryuk ransomware has a relatively low data recovery rate, at ~ 87%, while Sodinokibi was close to 100%. "
Now you have a guarantee that your files will be returned 100 %.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/1D79EC7A3E0A04D9
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/1D79EC7A3E0A04D9
Warning: secondary website can be blocked, thats why first variant much better and more available. If you have problem with connect, use strictly TOR version 8.5.5
link for download TOR version 8.5.5 here: https://filehippo.com/download_tor_browser_for_windows/
When you open our website, put the following data in the input form:
Key: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Extension name:
33394668
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
