secid Posted April 7, 2017 Report Share Posted April 7, 2017 Hi, It is possible to decrypt files ? Globe2 Globe2 does not work file Original and encrypted Regards nowyA4.jpg.id-CCCB8848.[[email protected]].wallet Link to comment Share on other sites More sharing options...
ShadowPuterDude Posted April 7, 2017 Report Share Posted April 7, 2017 You have not been infected with Globe 2. Wallet is a variant of CrySiS. Unfortunately, there is no known way, at this time, to decrypt files encrypted by Wallet for free. Link to comment Share on other sites More sharing options...
Bond007 Posted April 10, 2017 Report Share Posted April 10, 2017 Hello, One of our customers got infected with the [[email protected]].wallet encryptor. They paid the ransom, but instead of receiving the keys they ask for more money. My advise is not to pay because this are ordinary thiefs. Alex. Link to comment Share on other sites More sharing options...
Sarah W Posted April 10, 2017 Report Share Posted April 10, 2017 Hi Alex, Unfortunately, that's the issue with dealing with criminals, some will not be honest and give the files back. A good backup procedure is very important and well worth the investment. You will also need to secure RDP with a strong password, if you continue to use it, as this is how the criminals enter the system. Regards, Sarah Link to comment Share on other sites More sharing options...
Sarah W Posted May 20, 2017 Report Share Posted May 20, 2017 Hi, If you haven't seen, Kaspersky and Avast have released decrypters for the .wallet variant of Dharma, since the keys were released this week. https://www.bleepingcomputer.com/news/security/wallet-ransomware-master-keys-released-on-bleepingcomputer-avast-releases-free-decryptor/ Regards, Sarah Link to comment Share on other sites More sharing options...
Recommended Posts