---=== Welcome. ===---
Merry Christmas and Happy Holidays everyone!
You have a great opportunity to enter the new year, leaving all the bad in the outgoing year.
I advise you to write to us as soon as possible and not waste your precious time that you can spend with your family.
With our decryptors recovery will take you the least time, without us you will have a very hard time and some of your files will not be recovered never.
The longer you think, the harder it will be for us to negotiate with you .
Waiting for your dialogues in our chat, below you can get acquainted with what happened.
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 6836h.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/E41BCDC1AC234364
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/E41BCDC1AC234364
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
6836h
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
For google: Revil/Sodinokibi
All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. ===---
Merry Christmas and Happy Holidays everyone!
You have a great opportunity to enter the new year, leaving all the bad in the outgoing year.
I advise you to write to us as soon as possible and not waste your precious time that you can spend with your family.
With our decryptors recovery will take you the least time, without us you will have a very hard time and some of your files will not be recovered never.
The longer you think, the harder it will be for us to negotiate with you .
Waiting for your dialogues in our chat, below you can get acquainted with what happened.
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
For google: Revil/Sodinokibi
sub
2361
svc
sophos
veeam
vss
AcronisAgent
BackupExecJobEngine
AcrSch2Svc
BackupExecManagementService
BackupExecVSSProvider
mepocs
stc_raw_agent
bedbg
MSExchange$
MSExchange
MVArmor
CAARCUpdateSvc
memtas
MSSQL$
BackupExecAgentBrowser
PDVFSService
WSBExchange
sql
ARSM
svc$
VeeamNFSSvc
BackupExecRPCService
CASAD2DWebSvc
VeeamTransportSvc
VeeamDeploymentService
backup
MVarmor64
BackupExecAgentAccelerator
BackupExecDiveciMediaService
VSNAPVSS
MSSQL
Extracted
Path
C:\98dl124-readme.txt
Ransom Note
---=== Welcome. ===---
Merry Christmas and Happy Holidays everyone!
You have a great opportunity to enter the new year, leaving all the bad in the outgoing year.
I advise you to write to us as soon as possible and not waste your precious time that you can spend with your family.
With our decryptors recovery will take you the least time, without us you will have a very hard time and some of your files will not be recovered never.
The longer you think, the harder it will be for us to negotiate with you .
Waiting for your dialogues in our chat, below you can get acquainted with what happened.
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 98dl124.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/DAA1968A144C4B45
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/DAA1968A144C4B45
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
98dl124
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
For google: Revil/Sodinokibi
