All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
2415
svc
VeeamDeploymentService
BackupExecRPCService
VeeamTransportSvc
stc_raw_agent
VSNAPVSS
BackupExecAgentAccelerator
BackupExecVSSProvider
MVArmor
BackupExecJobEngine
MSExchange
sophos
AcronisAgent
svc$
vss
PDVFSService
WSBExchange
AcrSch2Svc
veeam
BackupExecAgentBrowser
MSExchange$
BackupExecDiveciMediaService
CAARCUpdateSvc
CASAD2DWebSvc
VeeamNFSSvc
sql
mepocs
backup
memtas
MSSQL$
ARSM
MSSQL
MVarmor64
BackupExecManagementService
bedbg
Extracted
Path
C:\4f65cp-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension 4f65cp.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/EFE31817E0162291
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/EFE31817E0162291
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
4f65cp
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
