All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
4430
svc
ARSM
vss
MSExchange
veeam
VSNAPVSS
BackupExecJobEngine
MVarmor64
svc$
PDVFSService
VeeamNFSSvc
AcronisAgent
sql
CASAD2DWebSvc
BackupExecAgentAccelerator
AcrSch2Svc
MSSQL
backup
BackupExecRPCService
VeeamTransportSvc
MSSQL$
BackupExecDiveciMediaService
MSExchange$
MVArmor
BackupExecVSSProvider
sophos
BackupExecAgentBrowser
CAARCUpdateSvc
VeeamDeploymentService
mepocs
WSBExchange
memtas
stc_raw_agent
BackupExecManagementService
bedbg
Extracted
Path
C:\7cyabv1br9-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 7cyabv1br9.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/ED9872A284E669E1
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/ED9872A284E669E1
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
l4x87ZNpiDO+kqTFpHQiE4pPLy6I6VWQtRU3EbWYJrGt+eJuHp/XO1upYC7h35GR
s8cA6Qhd0m0e8tDgEHRO/c5rTS2fusSf0jxBzcb2lb68pCVx3XHl3nPeD4lRQw78
hnyNjv5HcglYRtI5TsSxn+zeFggSPhLZGXLCBa7fcAcSfJolPf1GaDJtDG+j2u1w
HEHoqRdaVczz+ogHWpQkomZ59hXyKGPKhMQQXSdDdDzhVZLgmIYsFLO+CrLUWoyV
HxRn5znRMgq2pkgHYLhq9U8rGaNbmWYm9HcT+b3/JWOx7CFZt8x42pKT/4IgGSzq
1FdMEnjCjAVmTBdIwuqPWOr1YTaT3s1oAXvGU9e5Ag5+Ksygvir0ITxrxnHA0cgM
Gl4uXx1sko5hc1afDupQ1d3bZ7+1IGrxXrwKdUuBTzVMdHin0i6+8ZrwU1WvZxU/
VGm+laMIGXgRadWUtaMcIiuiUdZm/XV/R3SORerfw/lchlO2Dwqf1J8iY/Wwr/mt
u7QUENQLbDRLjZyw11gAIlAtLZQ/O3VSiUIawTJKXGCSN9MOLVSUG3Z0H89hB/QH
lktIGrz0ELQIwIZ4T8SFKX6tlRR7dIm22nh+ZFiUQgjq8qkkqOyxFbfisH0VYUa2
92pk+JsBANcE5kBh6iUptin81NcuHSgpJZjVyp6mWBX+VrkeU5BkpEMjzjUEtpEd
EAIHxrFRS9N2Vk68UXHJ0P6CiW3l3rIhDuGxU8FKW35h1Hh8CYUDvcsTbnqNX0JE
uQWKlC6oxVdOTab4eDT35hzpgqrnVjUAtJmf0wJ8Xhtsm85bHUZJL0HSgb0vBpKP
pHAN6p43E3r2pV2tLFujMsdARqwf2hhDR6BWbPgmt+D47az+V6CMW35Ve+XXURtQ
9XT85GEilKcaXySX5BiR4XhIiAsfs+rNeaiaU/OJqjE26kuIyniha3KYmN38/mrS
coJGj2RkAcV6ffbcHLf8SQYh756y86cHW2ixweb1Ig295YShKlxgmBUcC7mKkJvE
FxmxShvWNsmNqCh0950xF6EGtkDqcUAtauC34ueKWpWb+tszncLmPgyq6fT6y+nJ
R7BdFdUunmbheFwUk5RpPRW9rgw2X/wuuk27ybUta941rpa5b4v6c7V/JFpWD05w
ViygkfidF1DGo7oEGP93yQ2V5Vldh7yUkKxdL7O4K4HJrJA5BD37hsab9t1N2Ann
iY53nx+LmzCI4S2SdSZlADCz0uDPtLHx5xUf7ychmLig0m6Of4iyYz9Weef3ns+4
kbfyorcx0yzdW3gVzR9C2mYuNK+Mk05gAGwqNcv5w5ksOjBBOvs=
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
