An de-encryption routine has been added to antivirus databases for encrypted files. Virus.Win32.Gpcode is in the beginning of encrypted versions of files. On PCs with encrypted files users may find files which contain warnings in Russian. For decoding contact the following address: xcv789@mail.ru.com or bnm7814@yahoo.com [Ztc567@mailonline.ru] [ZTC567] [For decoding contact: bn7814 @mail.com]”]
Source: https://securelist.com/malicious-encryption-programs/29909/