All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\Recovery\612t46e-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 612t46e.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/4A6A6B1763387197
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/4A6A6B1763387197
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension c4i7645x.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/DAA1E987B2CAB117
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/DAA1E987B2CAB117
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
J34+Xdf2OojR6wb7Bu5n56HB7qpfd8JFkDCyHxur0JN3ne7Xsixz4Kp8l+lKn6PT
/D6Se4suoyJt/R+LozQLCLxcESYpZ+KR0k1USz5VQrsWiDaGjyvhn9LgVJ2IQdIc
QbTH+f01CLFgpjB2dUGu+UKR2DYudOE7IpdfpOgTnUpKRUE9/3ApcFkTRV7X3wAD
w1HX6P6k47RGCcZ4tFjXVJsgA+UNwButNzbirpfI/GwQIMgOpN7ysLmcvVrcbLPT
tbYlFP3exXyiV0Mz2Y4sRZSXLqVC+r4KZFE6LZTnUWJrXqBJoYjMQuq6aq6YgbR1
+fIuiqODKDfuPatutVkcypTtDmomwbNi76dFLZMxN3na1EMqPQmRsW9I6xQtoKoN
W1zGKm0v/6bY3wQTYGLw8Ru/BoqXklq0o9p8QuDD6cDQZmNRXwVIBs34r9Vn6jxo
w5ezU+RfP5I48enxPz5BAaeZTJ3d57nspt+84+ffHovLWaE7S+6vDeAxq/8jVjuc
r6JJ08d/fofX86WvqGqMRYlkipSmKN3ZPmCd71ZJtlgZhHfNoKzacLsKyrfQ4mJo
lSUMeQBVtyiE1CbvfQTMAd+PIns650NhNylKtCjc1LAe8zp20tpA1ui+OiE46VPO
nNMO03PMPNvtH8I/m7g4LEwK22zW+8TenS/xehGqfzTuPlcvrU0QVWheQH1nPwNK
+09BWmiqtF4ykqK8VwjxUXS6SWT7MwvzIW3I59JWD6zfvG17dgE1B/zOHaIiG5nt
jhwRNoeYamIdRvAV3f7WqRYFyJ6peWRR8FTUFUhaPFPRCL2UFtgEwyMFW4WBUMPh
TKi/kNlmsJo2AyzO5VbCBSwY0N+LOwQqqsvjJAUX8sJhcuwEZTj171PqwsTd8azF
3uzgafYGD44j9bioSdUze/pZTItvRESPEttrApHCG+1cdOEfwGLwhLah7c5nPQmu
leT8RhZNFj4AkdzAiuGYbXrb0E0rP1MGul1Qobdr0ZbQ4Da6pRAWuuk6vbk4JdAz
dMB5K3UAPIQRaN/L+omRrSbrw3JVRYVRQ6zRqIsiqf+apynD3tT4Xq1TyUwxGeeg
Rk3yKXOGc43iASUsfzVhRKpQrqEvZ3x8hsb5OIkalRc5PK6Y5NDiJ7E6kHwIvDUs
wSwM5k+8aycGstJnDoKVHz0euf4hlhJkYUpWqL5pW99K4EuO8j32D2Q993fpicYT
b8vKL1MZkuVq3TZ8xBVWvkYdtGG5XtmDUY20740KjM2xy5Smo4P1eaiORmOi0KA7
HMVRmVX5vGffJtISucsYFiml53hgmrAc3iyov/oCjmJb01mXYdKYipE1vUKAtg8j
eDvFOLqnEW4zmUYQbGV1qb3DoA0Y3BQxOuPxTo9RT+s=
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
