All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\Recovery\5v15b-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 5v15b.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/3EA1A4E36040776B
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/3EA1A4E36040776B
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
gwXal7U5lDi3uQVetSkS3Y+yTlTlZcwYE15z/FUPZ3x311x8ZrV2ip3Er9+Ha+2h
tMmOc+YvDpMa8i3RqUdG5VDbDZgq9gwAZ0iJMgy9L7Fd0Hb8SDvd7vuTkfui+mlR
FziwUqJZy2JcoWSvwzFWUQzFiLxH8bp0CuJmhlHku9eLKuE7YNvgETJOdW/JSqhH
lcHpG8sPsqu+djDIEwxb8hqBOjTsMlQUtba6NWNMBrIBVpEZKmPExzqq4S1iZWUp
KbvZTDiGcM6HE50g3GZn1lTILEaOd8Dw8j7jYHtNBFwEnwfZQCf7T7LkuQudTBG5
hXBOeq4osRJEzqB4eMxHekRfyBX5bqWOWiUGziRf09LxC5G2KFhsELRbxkSXHbtW
ijjX77OiUAsLMNQDS06gsu8EwNLxbkERA076RTLtNfdREyj2RfyEuAhPW7M888Vf
97Y3XlLgswhtLUULcforpj9Z4z8Bo7pS5L4HiBlv83sDvHx57nZJ8lqqScKRCUME
qh6hrMz03AvPcor/TNtGYt7VbCM1rW/8C5nwnicMCFT4t4yjYvLr8vjtaSe1RO13
V99FnEn9Pmng5f3x5WfyDd2AxnuvVVHZaoZIzlv/f4xaY60d8Vj0LAD1uHyii+oW
A07FevVz+RIW7rAfs2Mb19jLpuc2SYTOlJHXdDqbhMZ6SmSrQeMdvbsLjEPjC84A
L/UJeb2A+m2kOjjp4P+h20NKha+ajSbvXwGwOY0U6dbWjo0qNeKgipO4R+Zn5pS+
rsVLbFyiXuVNYsAVh0CitlF3nrHi3ZZJGG3OCNOcLChhnsr99A9p3vQNcYLgX/wC
DGHL9HQXywqYGSNH6WgwAXU47vNifaelc6onay1WMIHqQOvdSAI2wIftV4L41Y0G
Y0Dwae0APvbezeqLUxYjl1MwcqOmYixkw/k13RPn5GJbnbWaycZ6iFIEDylOav23
vLk47lE10FOHuKm1JQpP+qyRaBul3iqIVgyBX1Xwn2VHCaCMDhOo1EWmS2fO3WSY
Rn6Dd+zTGD7+ZJhwOfqu49hK+ZCIxeHBXp7gn7yrGsqpgU1ltuhDK0ccgDc4wgqQ
U9CP6MJJOes1561NvuQNIM6cck1nIbYMto0FQG+AjsuK90RS/HmxQ8SSvbOtmSMu
cYHTmZM6pcRqBX4ITA2CTmMNMp+FiGidFO2jToeZQ83KPdoXGq2NVXnn0NU4F7By
nNr+cDILxS4LW4uPzgmO74A9KQzHRlV1xtqCUK6mbNJZj+GLZ36PjbYr4vj7IES7
7hHEiLs23tEliHUDfHET42YXsAnmQg7S5Mpu5ZdTQev+ryuwW9RU/HHOiVR6yLoh
3d/YxPPCqPeaXtrvPssI/5GMynY=
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension oitd618.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/66EFD50C7CD78C48
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/66EFD50C7CD78C48
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
