All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\Recovery\21718r0-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 21718r0.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/A4D1AF1AA9BEC90E
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/A4D1AF1AA9BEC90E
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
