---=== Sodinokibi Ransomware ===---
All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
I suggest you read about us on the Internet, we are known as "Sodinokibi Ransomware". For example, this article:
https://www.coveware.com/blog/2019/7/15/ransomware-amounts-rise-3x-in-q2-as-ryuk-amp-sodinokibi-spread
Pay attention to that:
"How Much Data Is Decrypted with a Ransomware Decryptor?
In Q2 2019, victims who paid for a decryptor recovered 92% of their encrypted data. This statistic varied dramatically depending on the ransomware type.
For example, Ryuk ransomware has a relatively low data recovery rate, at ~ 87%, while Sodinokibi was close to 100%. "
Now you have a guarantee that your files will be returned 100 %.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available. If you have problem with connect, use strictly TOR version 8.5.5
link for download TOR version 8.5.5 here: https://filehippo.com/download_tor_browser_for_windows/
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
3413
svc
veeam
svc$
memtas
backup
mepocs
sophos
sql
vss
Extracted
Path
C:\Recovery\l4dkd-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension l4dkd.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
I suggest you read about us on the Internet, we are known as "Sodinokibi Ransomware". For example, this article:
https://www.coveware.com/blog/2019/7/15/ransomware-amounts-rise-3x-in-q2-as-ryuk-amp-sodinokibi-spread
Pay attention to that:
"How Much Data Is Decrypted with a Ransomware Decryptor?
In Q2 2019, victims who paid for a decryptor recovered 92% of their encrypted data. This statistic varied dramatically depending on the ransomware type.
For example, Ryuk ransomware has a relatively low data recovery rate, at ~ 87%, while Sodinokibi was close to 100%. "
Now you have a guarantee that your files will be returned 100 %.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/E0C76E8383A67D19
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/E0C76E8383A67D19
Warning: secondary website can be blocked, thats why first variant much better and more available. If you have problem with connect, use strictly TOR version 8.5.5
link for download TOR version 8.5.5 here: https://filehippo.com/download_tor_browser_for_windows/
When you open our website, put the following data in the input form:
Key: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Extension name:
l4dkd
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension ki392o.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
I suggest you read about us on the Internet, we are known as "Sodinokibi Ransomware". For example, this article:
https://www.coveware.com/blog/2019/7/15/ransomware-amounts-rise-3x-in-q2-as-ryuk-amp-sodinokibi-spread
Pay attention to that:
"How Much Data Is Decrypted with a Ransomware Decryptor?
In Q2 2019, victims who paid for a decryptor recovered 92% of their encrypted data. This statistic varied dramatically depending on the ransomware type.
For example, Ryuk ransomware has a relatively low data recovery rate, at ~ 87%, while Sodinokibi was close to 100%. "
Now you have a guarantee that your files will be returned 100 %.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/48F51BA04CE43C39
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/48F51BA04CE43C39
Warning: secondary website can be blocked, thats why first variant much better and more available. If you have problem with connect, use strictly TOR version 8.5.5
link for download TOR version 8.5.5 here: https://filehippo.com/download_tor_browser_for_windows/
When you open our website, put the following data in the input form:
Key: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Extension name:
ki392o
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
