Your files are encrypted! - - To decrypt, follow the instructions below. - To recover data you need decrypt tool. To get the decrypt tool you should: Send 1 crypted test image or text file or document to [email protected] (Or alternate mail big

[VictorS 0]

Your personal ID
  BE 0D 68 8D 80 50 50 24 6C A7 7A 26 D7 36 9A F2
EF 40 D8 B7 A0 1C 22 E5 C6 76 CE F7 E7 99 A4 9C
E5 50 48 FB FF 6A CF 12 7A 1C 75 EA 69 76 06 F6
96 A8 96 B6 A4 93 6B A7 76 0C 77 7A F4 1A 0C 31
EA 0E 46 D9 A9 21 2F 5D 0D 5F 10 35 23 C2 AB AF
18 44 CD 55 D1 8F 98 F3 84 EB 87 12 53 55 CC 36
ED C1 C5 1E 00 B7 98 A9 06 75 6F 9A 9A EB C0 FB
7E 39 C3 D7 4B E0 1D 8D 5B D3 CE 51 44 9A D5 07
16 63 98 84 D2 9A E1 68 B2 B4 EF 98 CE 5A D7 EB
C4 99 C9 1A A6 52 41 0A 2F BD B2 1D A3 3B 73 C9
DC 6D E8 7A 46 85 A8 7C 88 49 A7 8B BB CF 07 D7
BB 90 46 7B B5 47 49 24 32 94 9E F0 4E 60 53 D8
53 09 62 18 DB 34 AF 9B BC 94 D7 F8 C1 E0 EE 8A
6E 07 3B 40 30 17 AB 5F 82 17 4E 4B C3 6D B0 6F
34 28 FE 9C AA A2 0B B1 47 C0 89 BC 72 6D A2 14
A2 37 1F A0 B4 2D 90 0D 05 A4 29 27 EF 06 CF 9F

English
- Your files are encrypted! -

- To decrypt, follow the instructions below. -
To recover data you need decrypt tool. To get the decrypt tool you should:

Send 1 crypted test image or text file or document to   [email protected]  (Or alternate mail  [email protected] )

In the letter include your personal ID (look at the beginning of this document). Send me this ID in your first email to me
We will give you free test for decrypt few files (NOT VALUE) and assign the price for decryption all files
After we send you instruction how to pay for decrypt tool and after payment you will receive a decrypt tool and instructions how to use it We can decrypt few files in quality the evidence that we have the decoder.
------------------------------------
MOST IMPORTANT!!!
Do not contact other services that promise to decrypt your files, this is fraud on their part! They will buy a decoder from us, and you will pay more for his services. No one, except [email protected], will decrypt your files.
------------------------------------
  * Only [email protected] can decrypt your files
  * Do not trust anyone besides [email protected]
  * Antivirus programs can delete this document and you can not contact us later.
  * Attempts to self-decrypting files will result in the loss of your data
  * Decoders other users are not compatible with your data, because each user's unique encryption key

 

data.csv.BIG+

how_to_back_files.html

[VictorS 0]

How I can to back files?

[GT500 495]

This appears to be GlobeImposter 2:
https://id-ransomware.malwarehunterteam.com/identify.php?case=5639466abc0ccf4b28e8dac83eef7ba63e3e46c1

Unfortunately there is no known way to decrypt files encrypted by this ransomware without obtaining the private key from the criminals who made/distributed the ransomware.

[Acelooc 0]

On 5/29/2018 at 6:34 AM, GT500 said:

This appears to be GlobeImposter 2:
https://id-ransomware.malwarehunterteam.com/identify.php?case=5639466abc0ccf4b28e8dac83eef7ba63e3e46c1

Unfortunately there is no known way to decrypt files encrypted by this ransomware without obtaining the private key from the criminals who made/distributed the ransomware.

Hello my question is can this cyber criminal delete your files for real?

[GT500 495]

If the ransomware is still on your computer, then yes. They could also do so if they were able to remotely access your computer. Otherwise, the worst they could do is delete the private key that allows for decryption of your files.

[Acelooc 0]

On 6/7/2018 at 6:42 AM, GT500 said:

If the ransomware is still on your computer, then yes. They could also do so if they were able to remotely access your computer. Otherwise, the worst they could do is delete the private key that allows for decryption of your files.

So is it a bad idea to remove ransome to avoid getting deleted? 

And if the ransome has a countdown time, Then it expired.. Is your file will be lost? (Sorry for bad english)

[GT500 495]

On 6/10/2018 at 12:13 PM, Acelooc said:

So is it a bad idea to remove ransome to avoid getting deleted? 

And if the ransome has a countdown time, Then it expired.. Is your file will be lost? (Sorry for bad english)

It depends on the ransomware. Some of them actually need to remain on your computer for your files to be recoverable, and some of them need to be removed before they can start deleting your files. The best way to find out is to look for information on that ransomware at BleepingComputer and see what recommendations the experts are making.