All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\Recovery\c906etm78-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension c906etm78.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/3156873EC51C1FAD
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/3156873EC51C1FAD
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 6518v3kn.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/44161B6AF2A596BF
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/44161B6AF2A596BF
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
