All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
4619
svc
MSSQL$
BackupExecJobEngine
CASAD2DWebSvc
veeam
bedbg
sql
BackupExecRPCService
vss
BackupExecVSSProvider
PDVFSService
memtas
VSNAPVSS
MSSQL
AcrSch2Svc
AcronisAgent
MSExchange$
VeeamNFSSvc
VeeamDeploymentService
ARSM
MSExchange
VeeamTransportSvc
sophos
WSBExchange
svc$
MVarmor64
BackupExecAgentAccelerator
mepocs
BackupExecDiveciMediaService
stc_raw_agent
BackupExecAgentBrowser
backup
CAARCUpdateSvc
BackupExecManagementService
MVArmor
Extracted
Path
C:\Users\umo6tpg08-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension umo6tpg08.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practice - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/02C26672A1326CA7
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/02C26672A1326CA7
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damage of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
