So this seems to be another perfectly beautiful Monday morning!
I've woke up to this probolem.
All the files are encrypted like this setup.exe.globe
And have a readme file with this shit
Code:
Your files are encrypted!
Baш личный идeнтификaтop
deleted
Your documents, photos, databases, important data were encrypted.
Data recovery is required decipherer.
To get the interpreter should send an email to [email protected].
Next, you need to pay for the interpreter. In a response letter you will receive the address of Bitcoin-wallet to which you want perform the transfer of funds in the amount of 1.5 Bitcoin .
If you have no Bitcoin
Create a wallet Bitcoin: https://blockchain.info/ru/wallet/new
Get cryptocurrency Bitcoin:
https://localbitcoins.com/ru/buy_bitcoins (Visa/MasterCard, QIWI Visa Wallet и дp.)
https://ru.bitcoin.it/wiki/Пpиoбpeтeниe_биткoйнoв (instruction for beginners)
When the transfer is confirmed, you will get the decryption files for your computer.
After start-interpreter program, all your files will be restored.
Attention!
Do not attempt to remove the program or run the anti-virus tools
Attempts to self-decrypting files will result in the loss of your data
Decoders are not compatible with other users of your data, because each user's unique encryption key
Anyone had this problem before?
Let's say my data is worth more than 1.5BTC ... should I pay? Will they send me the decrypt key? Will they use escrow?
I would really like to hear opinions from people who had this problem also and they paid the ransom.