All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\Recovery\q2xp8-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension q2xp8.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/9738DE3203C67D49
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/9738DE3203C67D49
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
rBWV5ZNa6wx4aaxBM5Fs3b92E4NXEM8azNIHXb/rgLUOMOlL6EDuSyRq5F0/eoAb
qK7Mx7AmcJ8e6xJHcwIQjY4sw2SMx0u+NxZNmKwHnb7nm7QnXCxNGyHqzzD5rIBT
oLipG+hM1fB3v9bKmOgBgmj1f8gLwvGPrVafmiYKqcqvZ2zBkTBBi4fEzKK1/ykx
dchMY7L03WgZ9gqTjH6QGTQQ2cDfWtBsV/9KVxTCgogO2VWX84JUf41keEpgbIIx
7su7hGMzsRhtTaG8zd9WzQ7zHLR5CxDU4vBFoloJqHEFmnQvKZ+XiDzD3ngkVs5Q
RfKV6AFxBzUA391i0okD0seVPTrVFANV4JyeLEZmxLIkFPKK1wpnu+T6kZGSxqay
6lTb1fa7gD90ZuusbR8q5zpToBACCZh5219dENhDt3bUZ5XOCQ3S4awW4oSpOb9m
fGwsTzLoOdODA/ELB35TF3U3/w9kM/pEaWypD+CjF6e37rgdaNzJTbxEityNkz9n
He86xFo0CaxOrS48mG1pLhwoG6wPqZdsAfSiB+Rp9b5RsWUX5xSm3CLW6gO47+Wc
dN7O+Uu04UdMRY7KkyxDkWXIE74fHNAltc7SZa7LuoVzt1Biv4Y7/db5BKvA29aG
Xv4VVRBhmQ+ctr6a1vrK7vuPiFV0/KKkXml5BfCHxqs1NNFD73utGeSIKLW/KfsG
HvI9Y2BsfrO57hI0g+G8UidMqUZtF65HlK5brEpCbovlZUc23cv/LNh0SbfuPN0q
qtdqYa0yj4vdH34QKmt3mlE4fAyCwYBUh/i72T6TmIHTlNTw7Rx4f6Zc3eH97DLm
Ls5mYvvgEvexJu1/ZQN327As4goeN4NIAQtgwLaZ5wM1OJJifRyWedavT2xJSZ6F
tD35TpbyKQ+nMMOZni9tVJ4eOgpnjPVJ0kYoyfqUnfDB6rsTN4JH6kVUDzoqavou
fdVQiEWET1HGbqcRcbdSPbbfLmZ5hQa9fZcPtgyj3440GVjBYFQsjdR54j5JdQt1
I1ymvdUQi4/r8mG3D6J+vcaFAq358UV4AGGicgrrBld3eFvxSXcga7LmpQQhJze1
q5Q/KabKEj9qlVnz/uBF9FMaNDeE7fvcnWnHH/CyA9TwHG62fFZvtdsLK3JlNjaB
zwDkmWVvDc+b65szJaF7+7crFaeNIiuEQCNW17Dvs9tu+8L61iR9yT8o1HKsWNhg
bwsadO6ruD9vv185ztBCGygEjELRFwzCD56IvjJaabOr2vQ/qDnl98aqK9outTej
dW3tKo24In96CmgQSSE2hwHjZ/AfNr+IUsX1pmGIz6Pe6O42mJ5LiY5ZCP1rcI7D
ygidb5suJRWlRWcuMZzKgTzbu7js+zMY62w=
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
