Sign in to follow this  
JOSE LUIS TIGUILA

Ayuda!!! ransomware extensión .writeme

Recommended Posts

I recommend uploading a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with:
https://id-ransomware.malwarehunterteam.com/

You can paste a link to the results into a reply if you would like for me to review them.

Share this post


Link to post
Share on other sites
19 hours ago, JOSE LUIS TIGUILA said:

Según esto, no hay forma de desencriptar.  :(

Unfortunately that's correct. There is no known way to decrypt files that have been encrypted by the GlobeImposter 2.0 ransomware.

Share this post


Link to post
Share on other sites
3 hours ago, JOSE LUIS TIGUILA said:

Acaso será esta la solución?    https://www.aparat.com/v/r841k/Unpacking_GlobeImposter_Ransomware_With_x32dbg

No, that is not a solution to recovering your files. It appears that it's supposed to be a video of someone trying to analyze the ransomware, and not an explanation of how to decrypt files. If there was a way to decrypt the files, then an Anti-Virus software company would produce a decryption tool to help people recover their files.

Also note that the website in question uses shady advertising tactics, such as trying to trick you into allowing it to send your browser notifications (which would probably take the form of advertisements).

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.