Hello,
i'm a victim of the ransomware that encrypted all my file. i.ve try diferent versions of globimposter, but no way. i receive the message "the decrypter could not determine a valid key for your system, please drag and drop both encrypted file as well as its uncencrypted counterpart onto the decrypter to determine the correct key. Files need to be at least 128 bytes long" .

Can you tell me plz how to do to decrypt?

the email adress bigbig_booty@aol.com is for the harker, I paid the ranson but he no longer responds to the email I sent him and especially he did not send the right decryptor

thanks in advance

Hello @Vtchoula,

have you been trying to decrypt with the Emsisoft decryption tool hosted here:
https://decrypter.emsisoft.com/globeimposter ?

On that page there is even a "Detailed usage guide" that you can open to see if you were missing something.
If it still doesn't work, then I am afraid you have a newer variant of the virus and decryption is not yet possible.

Tell us what has happened after you read the guide.

My server also was encrypted and all files got encrypted. They now have '.combo' extension (Filename.ppsx.id-********.[bhurda@aol.com].combo). After long search, I found out, that there is no decryptor for it.
With no other choice I wrote to email, and since data on server was important, decided to pay. We dealed on 0.8 btc, and I paid on my own risk.
Guys have send me the decryptor right after transaction approved, and they've seen it.
If your data is important I advice you to pay. Do not use other decryptors - they've destroyed my test files

My server also was encrypted and all files got encrypted. They now have '.combo' extension (Filename.ppsx.id-********.[bhurda@aol.com].combo). After long search, I found out, that there is no decryptor for it.
With no other choice I wrote to email, and since data on server was important, decided to pay. We dealed on 0.8 btc, and I paid on my own risk.
Guys have send me the decryptor right after transaction approved, and they've seen it.
If your data is important I advice you to pay. Do not use other decryptors - they've destroyed my test files

Hello @hercules_puaro,
I don't know who you are but you could be from the cybercriminals trying to get people to pay. Advising others to pay the ransom is questionable to say the least. There is a new ransomware that is encrypting servers and asking 0.8 Bitcoin as a ransom payment in the moment, which is called "Forbidden Rasd". It might be the same cryptovirus or something based on it. For the time being there is no decryptor, but one might be made in the future. I am sad if you were indeed a victim and felt that you had no other choice but to pay the ransom sum.

I hope that less people encounter such trouble, just from knowing about it and how to prevent infection.

Best Regrads,
Execute

thats happen to me

hi

my jpeg and cr2 file change extension like(sample.jpeg.datawait and sample cr2.datawait)

i already format and reinstall windows and make new partitions.

all jpeg and crs file in my external hard disk .file cant open


uplode 3 file here: https://files.fm/u/b6nm45jn

please give me a salution.
thank you

@zoziano - this is sad to hear. I hope you can decrypt your files eventually.

@hanif_99 - If you have formatted and reinstalled Windows, and even made new partitions,
most probably a data recovery program won't be able to recover your files.
You just have to wait for a decryption program to come out, which is also not guaranteed to work, after your Windows re-installation.
Sad that you got hit by ransomware and you had to go to such drastic measures. We cannot help you in this case,
but at least you could read How to Restore Files Encrypted by Ransomware (Without Decrypter).

Kind Regards,
Execute