All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\Recovery\ax88zl145-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension ax88zl145.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/05911FDAED17B7A4
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/05911FDAED17B7A4
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
2M9nKXP8vrhIj+rVYRCy7xrdca8qvaGx3aU9TvzBbqh18ZjNou33jxm8K3Em6mLC
a0bp/9LnzUqPKrYRXzqCQ3mKjgMEBdCOHdCJj0hCoNNsvi6lnClrQjROQYFWBLNB
7GauZVlg0izWggwKVLT9piiEyLEhv6FzFC6DUTOAYUqdNtEGOsnJ52tPHVWkJSKN
E+u0FqFnTf2VqzxSrxXw+Ua7E8KhCmtvPEH+loy4rC+SahQkxfLmmAXJfsdHp1se
XyOshjeOgxpk/2Bxidg125VT6KPzKiqjV4aiKl53SUDW34UMVv5dmpsz55gre8uA
/byvmtPtrDSi6J3Bk64OzH+5y65VRIdrczVaZUi2pmNrQtvoRgplXGkCok5JqqRz
uQdnuBVvsZNqjCNpDLJpbkIxGqX8wmwwCYb7HkFDYAY5YWDuGbNjXoqfD2QO4cbQ
S/CxKTxHmF7qSMRagAlkWDLlOxeGMv3C0FZYpj0RkUV3NfVOVrxFRk3PZqPh0wKU
9fFQKagKdEg5FHPE8Z1vRizxzsTzVsCebCgt0Z9rhMdHcBOwrgiU+OPHE570FJfR
B96cTE37IBGSk+nFuokfKfYICcThCdp1mTIu0/QXv+FOfBSBmlGByuhHKXgPcdZD
4mhT9jpgZArCvSVQ/Zj6CrNkBaPc4Vsjl1edPONUc+5a5iUwTVVOoJ06CNpHm9t6
7rKWYsoiOwVGi2eEhEQYnGWBrLeeODFFfqmZlnp044aM2TPTeiWVgI62pXovHdbT
0V0y/KTJFeX6Xbb5ATzz1sgYC5GcElISpAOBl3Yjl8X4x5XQI1eXh/WOxH0GNWwa
R0U9gZ4gmxY/OaWZMKD90lPMm3wokQqzhi/sh3s2buIDIBWJr0+0nO4kxXKB9+NE
pVlVGHRemEO8IXNN1UWzt1B4z2DWQIVvXpzAiB4zMncOX7aCGVHKnO6p6hfFrHxR
awXx623v1F6tNpa+FtJ0signn6AjfqFFkywfNoZzS1eAWATMifyczDRjpKWEhSwf
nGUyEXCbQjwlljxP47XuxtQs8hbBJgZJnPaH4aHHIg/X+gsaP0uwTFpMJGatr+XP
tsrrmqu32OrIHByyPTkjhQ9a5zdW85xiSQqbXOQ7aK3fa7N4noOQ/4gSsD/XzPvN
vvHsTRYpMz/gtmsQAlXgTEzF27rDSZ+p1YGF0rIEMN7G2LY+cwa/m4ocxd001+tR
xF5JFOVFtjxEV0HrW4gT+YRivcQYKZ5H5MFDrA2niUAUtwjbANrxObmjJdSo+D33
fDy+Un/BHRnsD+0oqQrOI5Rkc175oDBJXy0NNxk/Gk32yEHS24CfQ9gU1nlEDp5w
baavzzhPdVlqGJE9+l5kk+sK5fAW5nWe1ABmag==
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension j01d0g93v2.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/BC1326926F493EAB
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/BC1326926F493EAB
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
zEmDZ56Cl2huOkd4bVXEG7qJp6z6IldITYxEwjwj7x+D5hhwD/74eoNV5DRXdCbx
RSY4eyewIjnrwStslFwDNtmtTwnsBrECpkr9JEX3vIxkr8BNjWNoBSu+zZdHjjqA
1ZMrnRHfAowcapUqN5NqyolAl1+ZhNXz4LQZv+9AU3Jez47xxu0dBjCuIZd8v/5N
jfGGMU0VxGlVbjbKQMcaD6Q6k06DcOh0wXvtIO3X56GH12L7YAJqeqOpql7nr5LM
6E0V89kKx7rifIKGl7tZA0+QpMAEVTQ/s08l3LOCArSASEP2pkIC7Brysd/Awp1n
ZvEZz1GgWXuV7VVmPmIbeFEp96u1gaM8aif150lujC7i/NWOs2ocQO1xtiQFp4YJ
VxM7CziKxn3pl83/h3yn+u8W6XhR+GgoWItR2FiJTl+jQbTHWnyJtGuwJQVoL8BW
/0b+jHelrMS13RCsj48q8L1EDGKiJUKT1NsbYBvv7lebhiDgLCUJTV0ae2dmJwkl
roV0+eKRw3kGyk/daqe5MNizTcQD/D8CWS5F2oVBLrRyhkNVthtagssFc/zlhSyl
pTv3ZqZG4SDS0xWifHdQvionImO+OUa+CIp2IYZdzVDPgVYD5dShBxkszhw3FIqX
VsZveymDx1SjY7wq0nqD4dPpaRRGkUSk09D13s0MunJw2vj0o4o3be55ZPxRnmNS
KCpv13lVzLar35b5Tra7sZ2rdgvwUJ2ycJ690ktKi6E6QpjGZJbdr1kiwtorCNNz
Sql+jUbgVwJR8ub+NNnki14sfjRw0iIVRZqcL6ctvznGsyciJsZ3ufxpC5s98qYd
DDOju7SmmuX2muCOrY0mzZvMSQsjPoOAxwSjbol//kaKEq0j77jvcpaIyKbw3Viv
ZOQ90HMLs2Wpmr8TWRJ2Pqb3glB0Pa3dQJLPEWSPuV5hQg9Pw3GwzttTHCfQItQN
j6hdgaviycjSN/UbiMXrajuBW7nPgeJWU72lSLa3V8lbBRT2em2wW+nAMhZkmB/x
LGBs20snbq0W+ow77Kz4zCxa3h9Fp0Gzs/yjqyJ62pkV+0+b5bjDgARfFWLqDj0R
OaEM4Aulw+2KFdy8h9ca8cZZMTQ4uixRxEk1cAyv9reK8jpEBeGsLGC9X/4WDDAV
bfbbZlhQ1X9RQdqNMqE29dQPb2RuUgXg9Ddir6wPWe7I0TZrUzjnuc7qYSjKeBst
HEKB0nBkktOwyqBqMAwA7r4Yv5HBf1NkDB44HwSyPCVLQbIcydWuoIGbzNMsvAOd
4tYzEPH1O0sEvXqVspJjzG7gz8D4ncreCSyXCgB1nDNb5r0i8yLjKGBbQdG/io0S
POcUH8WkR11IDFhoUXcsf81vzquLuPBdzZqO9JWX45a453Y9
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
