All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
4430
svc
ARSM
vss
MSExchange
veeam
VSNAPVSS
BackupExecJobEngine
MVarmor64
svc$
PDVFSService
VeeamNFSSvc
AcronisAgent
sql
CASAD2DWebSvc
BackupExecAgentAccelerator
AcrSch2Svc
MSSQL
backup
BackupExecRPCService
VeeamTransportSvc
MSSQL$
BackupExecDiveciMediaService
MSExchange$
MVArmor
BackupExecVSSProvider
sophos
BackupExecAgentBrowser
CAARCUpdateSvc
VeeamDeploymentService
mepocs
WSBExchange
memtas
stc_raw_agent
BackupExecManagementService
bedbg
Extracted
Path
C:\69h57n79g-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 69h57n79g.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/4DACA57F96A2C748
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/4DACA57F96A2C748
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
