All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\Recovery\1d281dn829-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 1d281dn829.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/D51F3167E776313C
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/D51F3167E776313C
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 33b8i3.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/95D1174A25C5EEC9
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/95D1174A25C5EEC9
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
