An de-encryption routine has been added to antivirus databases for encrypted files. Virus.Win32.Gpcode is in the beginning of encrypted versions of files. On PCs with encrypted files users may find files which contain warnings in Russian. For decoding contact the following address: [email protected] or [email protected] [[email protected]] [ZTC567] [For decoding contact: bn7814 @mail.com]”]
Source: https://securelist.com/malicious-encryption-programs/29909/