All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
2839
svc
stc_raw_agent
BackupExecAgentAccelerator
AcrSch2Svc
vss
backup
PDVFSService
VSNAPVSS
VeeamDeploymentService
sophos
ARSM
BackupExecVSSProvider
memtas
svc$
MSSQL$
BackupExecJobEngine
VeeamTransportSvc
VeeamNFSSvc
mepocs
BackupExecAgentBrowser
MSSQL
CAARCUpdateSvc
CASAD2DWebSvc
BackupExecManagementService
veeam
BackupExecRPCService
MSExchange
MVarmor64
WSBExchange
sql
AcronisAgent
bedbg
BackupExecDiveciMediaService
MSExchange$
MVArmor
Extracted
Path
C:\cvy8251-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension cvy8251.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/F11F770EFF12251C
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/F11F770EFF12251C
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
