All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\Program Files (x86)\61o0qo2-readme.txt
Family
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 61o0qo2.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/42B0AB1C950423ED
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/42B0AB1C950423ED
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
