Yet another instance of GlobeImposter ransomware has hit the wild, massively encrypting the important files on infecected computer systems. The ransomware’s primary purpose is to leave behind an intimidating ransom note which’s solely purpose is to extort the victim into making a ransom payoff. Similar to the other variants of GlobeImposter, this one also uses a custom file extension, driving researchers into believing the many variants are created by the same people. If your computer has been infected by the .GRAFF GlobeImposter ransomware, we strongly advise that you remove this virus from your computer and restore files that have been encrypted by it, by reading this article carefully.
SensorsTechForum is currently looking into .GRAFF ransomware and will update this article shortly.
|Short Description||GlobeImposter variant. Encrypts the files on the computer it has previously infected and then asks the owner to pay a ransom to get their important files back.|
|Symptoms||Documents, audio files, videos, images, archvies are encrypted. The .GRAFF file extension is added along with a ransom note.|
|Distribution Method||Spam Emails, Email Attachments, Executable files|
|Detection Tool|| See If Your System Has Been Affected by .GRAFF Virus |
Malware Removal Tool
|User Experience||Join Our Forum to Discuss .GRAFF Virus.|
|Data Recovery Tool||Windows Data Recovery by Stellar Phoenix Notice! This product scans your drive sectors to recover lost files and it may not recover 100% of the encrypted files, but only few of them, depending on the situation and whether or not you have reformatted your drive.|