.pptx file extension ransomware

[shahzaad]

Recently been attacked, all my files have now changed to ,pptx type, no matter what type of file is on my system audio video exe all are changed to powerpoint file type

i have tried almost every tool for decryption but no use, also identification methods online cant identify it as well

i need help cuz all my data is very important to me and cant access it

any news for the same attack or any progress in decrypting it will a help 

hope this gets over soon

here is the message present in every folder in a text document:

Your files are Encrypted!
For data recovery needs decryptor.
How to buy decryptor:

1. Download "Tor Browser" from https://www.torproject.org/ and install it.

2. Open this link In the "Tor Browser"

http://huhighwfn4jihtlz.onion/sdlsgdewwbhr

Note! This link is available via "Tor Browser" only.

------------------------------------------------------------
Free decryption as guarantee.
Before paying you can send us 2 file for free decryption.
------------------------------------------------------------
You unique ID
so n so ( a very long id)
 

[Aura]

Hi shahzaad

Can you upload an encrypted file or ransom note to ID-Ransomware and copy/paste the results here?

https://id-ransomware.malwarehunterteam.com/

[shahzaad]

here u go aura, thanks for listening

hope to get a progress soon

[shahzaad]

On 11/13/2018 at 12:29 AM, Aura said:

Hi shahzaad

Can you upload an encrypted file or ransom note to ID-Ransomware and copy/paste the results here?

https://id-ransomware.malwarehunterteam.com/

 

[Aura]

Sadly as stated by IDR it seems that this Ransomware cannot be decrypted for free at this time. Your best bet is to restore your files from a recent backup if you have one. If not, you should backup your encrypted files somewhere safe, in case a free decryption solution gets released in the future.

[Aura]

Hi shahzaad,

Are you still with me?

[opardon]

Did anybody pay the ransom? did u get a valid tool for decryption?

[Martian007]

I have the same issue any help ?

[shahzaad]

yes aura, and unfortunately i dont have any backup, and yes i thought the same, just saved my encrypted files and waiting for any software for decryption

kindly if anyone has any updates about the issue plz do share it will a great help 

thank you 

[Aura]

Alright. For everyone following this thread, I suggest that you follow the thread about this Ransomware on BleepingComputer, as it'll be updated if any new information are found about the malware, or if a decrypter gets released.

https://www.bleepingcomputer.com/forums/t/644166/globeimposter-ransomware-support-crypt-pscrypt-ext-back-fileshtml/

Thank you.

[Aura]

Glad we could help.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread.

Thanks