Allen M

.726 GlobeImposter Not Decrypting

Recommended Posts

I'm attempting to use decrypt_GloveImposter to recover family photos and personal records saved on an external hard drive. Everything was renamed to a .726 file extension. I've already formatted the computer and reinstalled windows to ensure the virus was removed.

I have the decrypt_GlobeImposter.exe tool as well as several files that were encrypted and some backups I had in Dropbox. On my fresh copy of windows, if I try to put the encrypted and backup file on top of the decrypt_GlobeImposter.exe as instructed, I just get "The Decrypter could not determine a valid key for your system..." Error message: https://www.dropbox.com/s/1bn9ldn7efxxala/Screenshot 2017-08-03 00.55.49.png?dl=0

Did I make a mistake by formatting the system or is there still some way to recover my files?

Folder with encrypted and unencrypted files. https://www.dropbox.com/sh/8vzo6ddjcu8cdd5/AABRl98UCn5ckG4gr6z2wQ5sa?dl=0

Encrypted file: https://www.dropbox.com/s/tw8go1pg6u8lrh8/Admin 0301_1509.html..726?dl=0

Original file: https://www.dropbox.com/s/ql4m7owrbbnksi5/Admin 0301_1509.html?dl=0

Any help would be appreciated!

Thanks,

Allen

Screenshot 2017-08-03 00.55.49.png
Download Image

Admin 0301_1509.html

Admin 0301_1509.html..726

Share this post


Link to post
Share on other sites

I am having the same issue with the decrypt_GlobeImposter tool trying to repair my encrypted files with the ..726 extension. I have not done a total reformat of my system yet but have cleaned it and removed the trojan. Any help would be greatly appreciated.

  • Like 1

Share this post


Link to post
Share on other sites

The tool is designed to work with .crypt files, and won't see anything with .726 extensions. I guess you could try renaming the .726 files to .crypt, but it would be nice if there was an updated tool for this soon.

Share this post


Link to post
Share on other sites

I've been hit with the 726 extensions.  Any help would be very appreciated.  I tried running the tool and it fails (same error as above)  I changed the extension to .crypt and it still failed.  Please help!!

Share this post


Link to post
Share on other sites

Renaming the files to .crypt will start the decrypter, but this tool only works with GlobeImposter v1. Apparently they still don't have a way to unlock v2 yet.

 

Share this post


Link to post
Share on other sites

There is, unfortunately, no known way to decrypt files encrypted by GlobeImposter2 that doesn't involve the cooperation of the ransomware authors. Sorry, but you will have to restore your latest backups.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.