| HDD GURU FORUMS http://forum.hddguru.com/ |
|
| GlobeImposter 2.0 http://forum.hddguru.com/viewtopic.php?f=7&t=42106 |
Page 1 of 1 |
| Author: | sempre [ January 24th, 2022, 15:40 ] |
| Post subject: | GlobeImposter 2.0 |
Hi to all! Please infos from decrypt files .lockis is ransomware GlobeImposter 2.0.? |
|
| Author: | Arch Stanton [ January 24th, 2022, 16:49 ] |
| Post subject: | Re: GlobeImposter 2.0 |
No decrypt AFAIK. |
|
| Author: | sempre [ January 24th, 2022, 16:53 ] |
| Post subject: | Re: GlobeImposter 2.0 |
sempre wrote: Hi to all! Please infos from decrypt files .lockis is ransomware GlobeImposter 2.0.? or repair files? |
|
| Author: | Arch Stanton [ January 25th, 2022, 5:03 ] |
| Post subject: | Re: GlobeImposter 2.0 |
Depends on if file is partially encrypted or entirely. To find out, you can for example use file pair, a good and an encrypted copy of same file. |
|
| Author: | sempre [ January 25th, 2022, 9:31 ] |
| Post subject: | Re: GlobeImposter 2.0 |
Arch Stanton wrote: Depends on if file is partially encrypted or entirely. To find out, you can for example use file pair, a good and an encrypted copy of same file. Hi! Thanks for replys! Partially encrypted! Tool repair file. DB? |
|
| Author: | Arch Stanton [ January 25th, 2022, 9:45 ] |
| Post subject: | Re: GlobeImposter 2.0 |
What are you saying, you need to repair partially encrypted DB? I'll try to direct someone who may be able to help to this thread. |
|
| Author: | sempre [ January 25th, 2022, 9:55 ] |
| Post subject: | Re: GlobeImposter 2.0 |
Arch Stanton wrote: What are you saying, you need to repair partially encrypted DB? I'll try to direct someone who may be able to help to this thread. ok thanks! |
|
| Author: | northwind [ January 25th, 2022, 11:15 ] |
| Post subject: | Re: GlobeImposter 2.0 |
GlobeImposter 2.0 is a copycat of Globe3 Ransomware. It's not decryptable. I've been messing around with this strain since it appeared and I've put a lot of effort to try and find a flaw in it (for personal reasons, one of my best friends got attacked and lost a lot of his work and personal data). It's very, very secure. And very well-written. HOWEVER, I was able to restore my friends' SQL database by 60-70% and I was able to recover a lot of his lost pictures and office docs. Not a solid recovery, but better than nothing. |
|
| Author: | sempre [ January 25th, 2022, 15:07 ] |
| Post subject: | Re: GlobeImposter 2.0 |
northwind wrote: GlobeImposter 2.0 is a copycat of Globe3 Ransomware. It's not decryptable. I've been messing around with this strain since it appeared and I've put a lot of effort to try and find a flaw in it (for personal reasons, one of my best friends got attacked and lost a lot of his work and personal data). It's very, very secure. And very well-written. HOWEVER, I was able to restore my friends' SQL database by 60-70% and I was able to recover a lot of his lost pictures and office docs. Not a solid recovery, but better than nothing. PM |
|
| Author: | sempre [ January 31st, 2022, 14:35 ] |
| Post subject: | Re: GlobeImposter 2.0 |
sempre wrote: Arch Stanton wrote: Depends on if file is partially encrypted or entirely. To find out, you can for example use file pair, a good and an encrypted copy of same file. Hi! Thanks for replys! Partially encrypted! Tool repair file. DB? Sorry, file repair name_file.db (not sql) |
|
| Page 1 of 1 | All times are UTC - 5 hours [ DST ] |
| Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group http://www.phpbb.com/ |
|