I have been hit with ransomware, and all of my files now have the extension *.nCrypt. I uploaded one of the "how_to_back_files_.html" files to the ID Ransomware and it came back with 2 results. GlobeImposter 2.0 which can't be decrypted, and GlobeImposter which can be decrypted. I downloaded the decryption tool from the link but it doesn't work, it says it needs a file that is 128 bytes long. I have attached one of the notes that was left, as well as an encrypted file and its unencrypted twin. Thanks for your assistance!
11. Such Great Heights - (Iron & Wine).mp3.nCrypt
11. Such Great Heights - (Iron & Wine).mp3