All of your files are copied and encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] GDRP dangerous [+]
We have copied financial files and other important information about personal data, it will be published on the Internet and will be used against you if you do not pay us, so if you do not want such consequences as customer churn, media coverage, fines like GDRP and other damages, we recommend you to contact us and pay the ransom.
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
3070
svc
memtas
vss
sophos
mepocs
svc$
backup
sql
veeam
Extracted
Path
C:\Users\1h74962-readme.txt
Ransom Note
---=== Welcome. Again. ===---
[+] GDRP dangerous [+]
We have copied financial files and other important information about personal data, it will be published on the Internet and will be used against you if you do not pay us, so if you do not want such consequences as customer churn, media coverage, fines like GDRP and other damages, we recommend you to contact us and pay the ransom.
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 1h74962.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/589D42FB1AF7AAAB
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/589D42FB1AF7AAAB
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
rsTkptxeh0zab89N6KNsolzpjocdu1koKpi+sYlxGlxzSL7evJz3gM9+0dz1ap+0
LcR6kyn+U38kk6EOxMbS6OCpWFUPuYm14+JlLmctbbWixxFwS2o2N8nxLoiWRijp
lSTVvkw0S20NQT0eigEQUCwc4Fu+3r2OIThgp31Q0XsxkKYCEEgTXDFto52AZ2FS
WIQTtcilhaXWDNHkFTAnlSty1EDUcxQTFjlhh5AaPyvnkZWsF5MVkBbl8a8XbWDJ
VSmgwa53F0uSa489Sy9YFmUZmy+QsvqVgtblIle9J2Dkm2UY4tQbWM/ZZ7wkKInX
osE3kjx4QbXgch9nCdb5xOCfIphOr9e7mAbCKk8WiHM3WALcvpg9p+6kdCJAehE0
WhRXo0wKN+kpW2UTLtgxQuog5QKlFzLqkgIyq9b5QZVxFXQurEkyT+hiXdi7CBh/
K+19QxaVYu5RtfPeKCblXMpL1/Lr75eI1HDmm0ROaOd63qNcE0iLSbQgrlDhT0KQ
1o14XJMj8TJG4Tr6ee1ArMxPq57BKg+qqBUJoi61x+3i6t05GkERRoYeHKKkBtzE
EbnKi+O0IfxXdoKCCz8pROiT40rZeIMbczf8dusXqoakMreUcj3wQic4KaV5wpP9
VKHLB54HnXyXt3X8VEDfCpR1CRWmMIft/aWIzmfsda2vIW+WuG/1IH7bjFrW929G
aOHC+g7pN3z5MMjzPDEii530h7LQfvxC2+ewv7Z9fP3oFl2kd/MRwASxlotmK5bW
2aus3u2vEfl42NkqS5VPudRL9RQHuAvfBCEbqnxCkIvLaqRXTUVEsqvACkfcjWMu
p+hUS2vD7hUrbTCHEnnNrhJWKEBk+oZ3qgabHxQRK0dlClwZ/rjvgu7k5zfi73fk
fmxdmU/lyUZmVmWZ66bhDLpTvumcx5zl3wcJxpvb2gDBa7Qt4UjsTn3E+Ws67E/D
DK3gZS3H+G2h/C/HMnzYcTqIpQt+GfkERcdXUznir7yU8ktU0BbyGAR7y9Oa0lnu
NN3BSBkd3KwFzKQmyn1R4eUdCLa2WzhiQlY5Fcik8o0Oy1C24TVYhs8HBEOkS1Da
2mON0jjQDnQ+/KVtrIjpPK+8em1r6EI8oNIPwopPU02GvxByEssiq8PVXn7BymNv
voftebhupR3aq+O5R1yvAOhOY9Vx4ndB69uSA/7cK9wgBtyIcqgkITBC1WdGcLtP
MoFzMFYDVL++/aYR8ccjZr9kH6c=
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
