All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. ===---
Merry Christmas and Happy Holidays everyone!
You have a great opportunity to enter the new year, leaving all the bad in the outgoing year.
I advise you to write to us as soon as possible and not waste your precious time that you can spend with your family.
With our decryptors recovery will take you the least time, without us you will have a very hard time and some of your files will not be recovered never.
The longer you think, the harder it will be for us to negotiate with you .
Waiting for your dialogues in our chat, below you can get acquainted with what happened.
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
For google: Revil/Sodinokibi
sub
2361
svc
sophos
veeam
vss
AcronisAgent
BackupExecJobEngine
AcrSch2Svc
BackupExecManagementService
BackupExecVSSProvider
mepocs
stc_raw_agent
bedbg
MSExchange$
MSExchange
MVArmor
CAARCUpdateSvc
memtas
MSSQL$
BackupExecAgentBrowser
PDVFSService
WSBExchange
sql
ARSM
svc$
VeeamNFSSvc
BackupExecRPCService
CASAD2DWebSvc
VeeamTransportSvc
VeeamDeploymentService
backup
MVarmor64
BackupExecAgentAccelerator
BackupExecDiveciMediaService
VSNAPVSS
MSSQL
Extracted
Path
C:\Users\102tbi7-readme.txt
Ransom Note
---=== Welcome. ===---
Merry Christmas and Happy Holidays everyone!
You have a great opportunity to enter the new year, leaving all the bad in the outgoing year.
I advise you to write to us as soon as possible and not waste your precious time that you can spend with your family.
With our decryptors recovery will take you the least time, without us you will have a very hard time and some of your files will not be recovered never.
The longer you think, the harder it will be for us to negotiate with you .
Waiting for your dialogues in our chat, below you can get acquainted with what happened.
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 102tbi7.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/CB2F6951FF12BEA2
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/CB2F6951FF12BEA2
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
102tbi7
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
For google: Revil/Sodinokibi
---=== Welcome. ===---
Merry Christmas and Happy Holidays everyone!
You have a great opportunity to enter the new year, leaving all the bad in the outgoing year.
I advise you to write to us as soon as possible and not waste your precious time that you can spend with your family.
With our decryptors recovery will take you the least time, without us you will have a very hard time and some of your files will not be recovered never.
The longer you think, the harder it will be for us to negotiate with you .
Waiting for your dialogues in our chat, below you can get acquainted with what happened.
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 6j1f6i86k3.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/F10C229C14E0992A
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.top/F10C229C14E0992A
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
6j1f6i86k3
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
For google: Revil/Sodinokibi
