All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\Recovery\5e7y3v8-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 5e7y3v8.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/D08EB029886B1FFE
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/D08EB029886B1FFE
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 265062875m.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/3037CFB247B8F004
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/3037CFB247B8F004
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
