Operation Global III ransomware not only encrypts, but infects your data as well

Hi,

I'm stuck with the Canadian version and the original OG3 Patcher give me "The infection exe could not be found."

All the links for the AU version are 404.

I will send an infected file...

Thanks!

Mario

here is the link to the patcher:

https://www.dropbox.com/s/n8chiw1qnbrsaxs/explorer.exe?dl=0

NOTE: YOU MUST HAVE UAC ENABLED BEFORE RUNNING THE PATCHER.

When going to run the patcher exe (explorer.exe), right click and select Run as Administrator.

If after you run the patcher a follow directions, the infection doesn't disappear, type the follow code into the infection payment field:

fc220de7942511d27839c1a18e27f1e0fa3a26f79deb81c166af98d5c0954511

Thanks for the quick answer!

UAC is enable, I did run the patcher but no luck. The main window of the infection never closed. 

So I entered the code in the infection payment field and the code did work.

Thanks again!

Mario

PS. After verification, There was many virus still running in the background... Even if the files were now available so this is only a solution to regain access to your files. 

Edited by Slowboy46, 03 November 2015 - 01:02 PM.

I have the AU version of the patcher if anyone needs it.

Please let me know how to upload it though...

Thanks for the quick answer!
 
UAC is enable, I did run the patcher but no luck. The main window of the infection never closed. 
 
So I entered the code in the infection payment field and the code did work.
 
Thanks again!
 
Mario
 
PS. After verification, There was many virus still running in the background... Even if the files were now available so this is only a solution to regain access to your files. 

 

Thanks for the quick answer!
 
UAC is enable, I did run the patcher but no luck. The main window of the infection never closed. 
 
So I entered the code in the infection payment field and the code did work.
 
Thanks again!
 
Mario
 
PS. After verification, There was many virus still running in the background... Even if the files were now available so this is only a solution to regain access to your files. 

Of course, nothing was ever advertised to removing the infection. In fact you have leave the infection active while u decrypt ur files. If you remove it before decryption, u will lose ur files. After u get all the files you need back from my patcher, then run a AV.

 

Exactly what I did. Thanks again,

For info purpose, this nasty beast was injected in my work computer by a Remote Desktop exploit... We are lucky it didn't spread to the entire network... That door is now close...

Mario