All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\Recovery\yo5l1-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension yo5l1.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/060CEBE10461A74A
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/060CEBE10461A74A
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 2qz2l.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/657C90A73D75096F
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/657C90A73D75096F
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
