jiancanfeng

Infected PC files with Ransomeware. Please HELP!!

Recommended Posts

All your files have been encrypted!
Your personal ID
2369719691713863200072018963803796371821360829544855685332919265259341616201371044905894398274198614
5824508264820056502955827723418664524268063608512220396513247110561035339721947065628294838985571626
2534434289691809180413006818013547146862907297957773852771544383570741366713673520093604665186623968
6289855054077492913547278278314943964973959484730438733303051502101126237538821696232421703702295897
6301979104971282410759166079635441546990224610636607180239988751363146543257644109621506955016722115
0014041636288309086489055826860533087723230337182130839184062810043394304683955106920168339715424003
832668491595017111All your files have been encrypted due to a security problem with your PC.
If you want to restore them, write us to the e-mail: [email protected] 
How to obtain Bitcoins
The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 'Buy bitcoins', and select the seller by payment method and price. 
https://localbitcoins.com/buy_bitcoins
Also you can find other places to buy Bitcoins and beginners guide here: 
http://www.coindesk.com/information/how-can-i-buy-bitcoins/
Free decryption as guarantee
Before paying you can send to us up to 3 files for free decryption. Please note that files must NOT contain valuable information and their total size must be less than 5Mb 
Attention!
Do not rename encrypted files. 
Do not try to decrypt your data using third party software, it may cause permanent data loss. 
Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam. 

 

This is the content of a file  How To Recover Encrypted Files.hta  these files are now in almost every folded on every drive .

I guess it  could be Globe or Globe2. But both decrypters were unsuccessfull.   

I also try the Apocalypse and ApocalypseVM decryption tools.  But the latter can't identify the encrypted files and non-encrypted files

For example, the file name:

ok-JWljifbux798mV9XpvWthSK76-pT096vgze+ZkpoyrhBewJZSWeNKOv8sBu92.[[email protected]]

 

encrypted files.rar

encrypted and non-encrypted same file.rar

Share this post


Link to post
Share on other sites

Sarah, THANK YOU - the GLOBE3 decrypter WORKED!

BUT, my conmputer was infected again last night.

I can't deleted this computer virus (globe3) completely with EMSISOFT.

Maybe I am doing something wrong.

Please HELP me

Thank you!

Share this post


Link to post
Share on other sites

Hi jiancanfeng,

What issues are you having? 

For x32 (x86) bit systems download Farbar Recovery Scan Tool and save it to your desktop.
For x64 bit systems download Farbar Recovery Scan Tool x64 and save it to your desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

  • Double-click to run it. When the tool opens click Yes to the disclaimer.
  • Press Scan button.
  • It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
  • The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Regards,

Sarah

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.