All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
1472
svc
sophos
vss
svc$
sql
memtas
backup
veeam
mepocs
Extracted
Path
C:\Users\phe5ss23qn-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension phe5ss23qn.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/8F6C172EEE0FA19C
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/8F6C172EEE0FA19C
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
phe5ss23qn
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension n64410w.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/40A95998EB849526
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/40A95998EB849526
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
n64410w
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
