vettalex

All my files encrypted with .global - Help Me -

Recommended Posts

 

Hello everyone, and I hope you can help me. Last week, Sonoi infected with a ransomware which has encrypted all files with extension .globe me I tried to follow this guide: https://decrypter.emsisoft.com/howtos/emsisoft_howto_globe2.pdf but without result, or rather, I can not find the "original" file, as they are all encrypted channels. Each time you start the computer, you receive a globe.exe window and is written this: Your files are Encrypted!   -------------------------------------------------- ------------------------------   Your personal ID 0875907554075854616992124172171910500463374758396793148544612929193905952959980595434988939706445241 9354152206278685239997314666637153729900443529701097995493198346923905222916526541563114648718759849 0885767870188993570037505654697961444035801619233047574820423949121502072605599132993593155949604530 2495226991883667545012422759085368853667654989005927548118174800791879878401342617965797695077673892 6737286378272955122776973228584696734529212963607760781824307418372668026616524288684722086514232335 4059014264131224995115749992785233500378629925158173347385042643009530547365378098629593660737560183 187995799179959111 -------------------------------------------------- ------------------------------   Your documents, photos, databases, and other important data Has Been encrypted. For data recovery needs decryptor.     -------------------------------------------------- ------------------------------   To buy the decryptor, you must pay the cost of: 0.5 Bitcoin on the Bitcoin wallet: 1JA2f7F1JE3faUzavH89iDiZxtZqV1bB82 (Buy Bitcoins can be here or https://localbitcoins.com/buy_bitcoins/ https://blockchain.info/ - Visa / MasterCard, Visa QIWI Wallet ..) -------------------------------------------------- ------------------------------   After the payment, send a letter to the email address [email protected] In the letter includes your personal identifier and Bitcoin wallet: 1JA2f7F1JE3faUzavH89iDiZxtZqV1bB82   In a response letter you will receive a program to decrypt. After start decryptor program, all your files will be restored. Help me understand how I can do to decrypt my files. Thank you all in advance :)

Share this post


Link to post
Share on other sites

Hi vettalex,

When you go to reply, you will see a box which says "drag files here to attach, or choose files". Click on that and upload the ransom note.

Regards,

Sarah

Share this post


Link to post
Share on other sites
Excuse me, I thought that the ransom was the one I posted you in the 
first message. So, you want me to send the file globe.exe? did I get it right? 
Sorry if I'm bothering much, I guess you have a lot to do.

Share this post


Link to post
Share on other sites

Hi vettalex,

Sorry, I just wanted to check what the ransom note was named so I can identify the specific globe variant you were hit with. If you have the globe.exe file then submitting that will help too.

Regards,

Sarah

Share this post


Link to post
Share on other sites

Hi vettalex,

Please download and use this decrypter. To use the decrypter, you will require a file pair containing both an encrypted file and its non-encrypted original version. Select both the encrypted and unencrypted file and drag and drop both of them onto the decrypter file in your download directory. If file names are encrypted, please use the file size to determine the correct file. 

Regards,

Sarah

Share this post


Link to post
Share on other sites

Hi vettalex,

You are most welcome. Glad we could help!

Usually, Globe comes in via RDP, so if you know that you have that enabled, please change the passwords to something more secure.

If you appreciate our decrypter and want to support the work we do, I suggest checking our product out, and consider buying it.

Regards,

Sarah

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.