All of your files are encrypted!
Find {EXT}-readme.txt and follow instuctions
ransom_template
---=== Welcome. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension {EXT}.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/{UID}
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/{UID}
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key:
{KEY}
Extension name:
{EXT}
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
sub
1143
svc
veeam
BackupExecDiveciMediaService
QBIDPService
SAP$
ARSM
BackupExecRPCService
VSNAPVSS
MSSQL
MSExchange$
avbackup
AcronisAgent
bedbg
MVarmor64
PDVFSService
SAPD$
teamviewer
SAP
BackupExecVSSProvider
QBCFMonitorService
CAARCUpdateSvc
CASAD2DWebSvc
memtas
SAPService
BackupExecAgentAccelerator
sql
BackupExecAgentBrowser
WSBExchange
SAPHostControl
AcrSch2Svc
svc$
BackupExecJobEngine
MVArmor
MSExchange
vss
GxVssHWProv
GXMMM
VeeamTransportSvc
VeeamNFSSvc
stc_raw_agent
backup
QBDBMgrN
GxFWD
GxCVD
VeeamDeploymentService
sophos
GxClMgrS
SAPHostExec
mepocs
GxBlr
BackupExecManagementService
MSSQL$
Extracted
Path
C:\Users\0bz016-readme.txt
sodinokibi
Ransom Note
---=== Welcome. ===---
[+] Whats Happen? [+]
Your files are encrypted, and currently unavailable. You can check it: all files on your computer has extension 0bz016.
By the way, everything is possible to recover (restore), but you need to follow our instructions. Otherwise, you cant return your data (NEVER).
[+] What guarantees? [+]
Its just a business. We absolutely do not care about you and your deals, except getting benefits. If we do not do our work and liabilities - nobody will not cooperate with us. Its not in our interests.
To check the ability of returning files, You should go to our website. There you can decrypt one file for free. That is our guarantee.
If you will not cooperate with our service - for us, its does not matter. But you will lose your time and data, cause just we have the private key. In practise - time is much more valuable than money.
[+] How to get access on website? [+]
You have two ways:
1) [Recommended] Using a TOR browser!
a) Download and install TOR browser from this site: https://torproject.org/
b) Open our website: http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/D1B83BB581528047
2) If TOR blocked in your country, try to use VPN! But you can use our secondary website. For this:
a) Open your any browser (Chrome, Firefox, Opera, IE, Edge)
b) Open our secondary website: http://decryptor.cc/D1B83BB581528047
Warning: secondary website can be blocked, thats why first variant much better and more available.
When you open our website, put the following data in the input form:
Key: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Extension name:
0bz016
-----------------------------------------------------------------------------------------
!!! DANGER !!!
DONT try to change files by yourself, DONT use any third party software for restoring your data or antivirus solutions - its may entail damge of the private key and, as result, The Loss all data.
!!! !!! !!!
ONE MORE TIME: Its in your interests to get your files back. From our side, we (the best specialists) make everything for restoring, but please should not interfere.
!!! !!! !!!
