Emsisoft Decrypter for GlobeImposter

Emsisoft Decrypter for GlobeImposter is a tiny utility designed to help you decode files that have been hijacked by GlobeImposter ransomware.

As you might have guessed from its name, GlobeImposter is a malware that imitates the extension and ransom notes of the notorious Globe ransomware kit. Simply put, the infected files feature the CRYPT extension, whereas the base of the name of the file remains unchanged. The note that comes with the instructions can be found in all folders that have been ravaged by GlobeImposter.

Since this is a copycat, you can expect the malware the lock files using RC4 or Blowfish encryption parameters. Its more likely source of spread is via unsolicited emails that feature attachments disguised as harmless Word of PDF files, but that in fact release an exploit kit that spread across your system the instant you open it.

It is important to note that you need to remove the malware from your system before using the application, as otherwise your system gets repeatedly locked and new files encrypted. At the same time, you need to make sure that you have the original file which you can withdraw from backups, emails or cloud, for instance. However, refrain from changing the name of the files, as the decryptor performs several comparisons to determine the correct extension.

Functionality wise, the application entails that you drag and drop the infected and original files on top of it. Once you release the mouse, the tool attempts to reconstruct the necessary encryption parameters. You should bear in mind that the process can be lengthy.

All things considered, Emsisoft Decrypter for GlobeImposter provides you with a straightforward method for recovering documents, photos and other files that have been encrypted by this ransomware.