All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. ===---
Merry Christmas and Happy Holidays everyone!
You have a great opportunity to enter the new year, leaving all the bad in the outgoing year.
I advise you to write to us as soon as possible and not waste your precious time that you can spend with your family.
With our decryptors recovery will take you the least time, without us you will have a very hard time and some of your files will not be recovered never.
The longer you think, the harder it will be for us to negotiate with you .
Waiting for your dialogues in our chat, below you can get acquainted with what happened.
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
For google: Revil/Sodinokibi
sub
2361
svc
sophos
veeam
vss
AcronisAgent
BackupExecJobEngine
AcrSch2Svc
BackupExecManagementService
BackupExecVSSProvider
mepocs
stc_raw_agent
bedbg
MSExchange$
MSExchange
MVArmor
CAARCUpdateSvc
memtas
MSSQL$
BackupExecAgentBrowser
PDVFSService
WSBExchange
sql
ARSM
svc$
VeeamNFSSvc
BackupExecRPCService
CASAD2DWebSvc
VeeamTransportSvc
VeeamDeploymentService
backup
MVarmor64
BackupExecAgentAccelerator
BackupExecDiveciMediaService
VSNAPVSS
MSSQL
Extracted
Path
C:\Users\lr2qm52i-readme.txt
Ransom Note
---=== Welcome. ===---
Merry Christmas and Happy Holidays everyone!
You have a great opportunity to enter the new year, leaving all the bad in the outgoing year.
I advise you to write to us as soon as possible and not waste your precious time that you can spend with your family.
With our decryptors recovery will take you the least time, without us you will have a very hard time and some of your files will not be recovered never.
The longer you think, the harder it will be for us to negotiate with you .
Waiting for your dialogues in our chat, below you can get acquainted with what happened.
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension lr2qm52i.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/A26EBA0E35A34282
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/A26EBA0E35A34282
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
lr2qm52i
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
For google: Revil/Sodinokibi
---=== Welcome. ===---
Merry Christmas and Happy Holidays everyone!
You have a great opportunity to enter the new year, leaving all the bad in the outgoing year.
I advise you to write to us as soon as possible and not waste your precious time that you can spend with your family.
With our decryptors recovery will take you the least time, without us you will have a very hard time and some of your files will not be recovered never.
The longer you think, the harder it will be for us to negotiate with you .
Waiting for your dialogues in our chat, below you can get acquainted with what happened.
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 6lm76a6pr.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/9517B013DC874958
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/9517B013DC874958
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
6lm76a6pr
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
For google: Revil/Sodinokibi
