All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
1143
svc
veeam
BackupExecDiveciMediaService
QBIDPService
SAP$
ARSM
BackupExecRPCService
VSNAPVSS
MSSQL
MSExchange$
avbackup
AcronisAgent
bedbg
MVarmor64
PDVFSService
SAPD$
teamviewer
SAP
BackupExecVSSProvider
QBCFMonitorService
CAARCUpdateSvc
CASAD2DWebSvc
memtas
SAPService
BackupExecAgentAccelerator
sql
BackupExecAgentBrowser
WSBExchange
SAPHostControl
AcrSch2Svc
svc$
BackupExecJobEngine
MVArmor
MSExchange
vss
GxVssHWProv
GXMMM
VeeamTransportSvc
VeeamNFSSvc
stc_raw_agent
backup
QBDBMgrN
GxFWD
GxCVD
VeeamDeploymentService
sophos
GxClMgrS
SAPHostExec
mepocs
GxBlr
BackupExecManagementService
MSSQL$
Extracted
Path
C:\Users\l909u5hxzg-readme.txt
sodinokibi
Ransom Note
---=== Welcome. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension l909u5hxzg.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/F628E6FA9F16FE23
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/F628E6FA9F16FE23
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
S0YuR3kPpV68vy+onHV4oD2oxjvZomX20LeEuRnvnij2gyKcpNYvJ7KLrlXz6X+O
BAYOFwhNTX74MzqnYUxTkEBa+I0oaee77JDo1O9bRvEMoYGbwN5j7l6RhzlqUf3f
HQ9+W4uWg6CkpdR1Ot/NeCWd5cFl1XJn1DulSCuCeHP79/1YKS0tqK6g4A9O4pYs
lHoeO31wkIjtUd6jenR5s7NZuZ/dLpK3kFIMJfyBT2uGSKqoIXa8CDrcotWUx2DO
jDznkzzCkJfulcd9kn/YTw18dOyOkb6PJBH7zoJvhkPEc6FXMDbvH2NXMsoe9j1q
12mCk0Zd5tzLGHU9DBGv4W4Ol6ZJraPif4cbdelbJwzvH8njpQwcNtqD34UgIHN+
5tzAn5AGYPrRu7/YD0oRbVQ0vO66a3ChfarCzli3epWVRYMCwaUyT8iuAD6wI8PN
ZOznBl03Jhho5esjnv904qHXd/vIVoEoh7X75AgwKk2cQxP31dbyBUNBmpcAfYLC
pVS2WvX31YvwTWZtFeB1lN11ohc1xnSCpjiskZH12u932+iaFyX4V+537YqZiHhW
p59kSRbdO63UGIA271Ws2EN0I9DsMyzVA7X4+68fUu8ebJCxiodSpUblgc0cVFtw
T9uWH9A5XJMajxIVvmdXxUQrTLlVxmAQFLpUNyvztIbq9EIFejEhcylLuh1O99mC
L6Z8ZybwGcCQn62ZzbsBa7E/hLD59+zGAmTCTUqsuryIrK9C4Czqmdl0c9h3DuBk
Loc42tS30bpGBDMv1Q/eyakdNivPCHR/gUE7USSZyccsnOUmW46+9fmXRiVmbLWc
/2Yj9etIRU55+3H53RiFBJwMyeZF6Kw7ZHGTztJJMdVyxPH/bvceml+6k4Ii88+k
w2TCjc4RVKMMMpCGlrLPO/jGBXn5mhy7vwtttgRaRvB9MJ/HJrh7g55Y5Ey18Ene
5uuuyS6ODQDvuidcUPq67+P2J6X9KtIRCWEPSrEZQzP74n1HdL/Pn9SC6jbHA0kA
5Nri6rDhrGtXAIlsEtdiE5p2L+x20WmsIThz6kbrZCLg8Ut9jA28O9J5pD9vXhHC
Sd6tnyA4V0sTJpjM+Ok/w92U9D8dWLyJ8b9M6I2RuwiDrSgRzrbuGoSRx+emqq00
6uVneByu1Go5tRyroDYVepBlaVsTRRRrxFp/zJfilHvWOWaqYz6yf5sP1nRThmC9
RVg7nWRagbqUhzXNnZ5RAA/UIFKe8k+cAwR9cdP83xSNxm64aJW7CW4aUYZyy03l
bVKMzgxUqb3ZPAF7qU9CYPFT0TWP0CHg4B7+k9lk8qACmLeLt4DEs8VH/o8ogJ++
scWAWVzjtaQ+aP0WxV6LKnp6gwXfBUPHhU7DMGLP6yxQl/LwVnMjmfDpNAv1fA==
Extension name:
l909u5hxzg
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
