All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
7563
svc
veeam
svc$
memtas
sophos
sql
vss
backup
mepocs
Extracted
Path
C:\Program Files (x86)\765y07n-readme.txt
sodinokibi
Ransom Note
---=== Welcome. Again. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your system has extension 765y07n.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/80764E56446B1F9D
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decoder.re/80764E56446B1F9D
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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-----------------------------------------------------------------------------------------
We will use the data gathered from your systems in future campaigns in 14 days
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
