All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\Recovery\474w9n-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 474w9n.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/C01D3D0DF894AE75
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/C01D3D0DF894AE75
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 07a1s2u9c.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/0C915B15483E36AA
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/0C915B15483E36AA
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
