Sign in to follow this  

Globalmposter 2.0 (.lol) (perhaps)

Recommended Posts

Good afternoon, on Christmas day my pc was attacked by a ransomware that locked my files with .lol. I was trying to log in using remote desktop at the time.  It simply said my profile had been damaged and could not be accessed.  Without thinking my pc had been attacked, I simply logged in as administrator and began repairing my profile to no avail.  Whilst doing this, I watched my files quickly change to .lol.  After driving home and taking the pc off my network, removing the infected hard drives (including my backup) and installing a new hard drive with windows 10, then installing new versions of my programs and re entering data (a very long tedious process), I am now wondering if there is any chance of unlocking the data on the damaged drives.  After much research, I found a company call Fast Data Recovery ( in Sydney Australia who has analysed my data a come back to me saying that they can unlock it. They have a no data, no fee policy but want $10800 per key to do the job.  They say they cannot tell me how many keys are required until they start the scan of my data and won't do that until I have paid the for the first key. Frankly, I feel that they are worse than the initial crooks.  I also lodged my query with DrWeb and they told me they couldn't unlock it.  I have had several different diagnoses as to what virus it actually is, therefore, I am at a loss now as to which ones to investigate. Your instructions tell me to download your diagnostic tools to the infected computer but having removed the hard drives, this is not an option. Based on the above information, could you please advise the best next step? Thank you for your assistance in advance.

ransom note.txt

Share this post

Link to post
Share on other sites

The file you attached is an e-mail that looks like one of the scams detailed at the following link, and I would believe is unrelated to any encrypted files:

As for the ransomware, I recommend uploading a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with:

You can paste a link to the results into a reply if you would like for me to review them.

Share this post

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.