All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
2415
svc
VeeamDeploymentService
BackupExecRPCService
VeeamTransportSvc
stc_raw_agent
VSNAPVSS
BackupExecAgentAccelerator
BackupExecVSSProvider
MVArmor
BackupExecJobEngine
MSExchange
sophos
AcronisAgent
svc$
vss
PDVFSService
WSBExchange
AcrSch2Svc
veeam
BackupExecAgentBrowser
MSExchange$
BackupExecDiveciMediaService
CAARCUpdateSvc
CASAD2DWebSvc
VeeamNFSSvc
sql
mepocs
backup
memtas
MSSQL$
ARSM
MSSQL
MVarmor64
BackupExecManagementService
bedbg
Extracted
Path
C:\Users\z935364-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension z935364.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/8E01FCBDFB269F17
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/8E01FCBDFB269F17
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
z935364
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension 28c9q585.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/6F933B7F897989EF
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/6F933B7F897989EF
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
28c9q585
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
