All Activity

This stream auto-updates     

  1. Yesterday
  2. Hi Kevin, Everything is working fine as far as I can tell. I think you can close this thread now. Thanks for all your help and for jumping right on it ... Emsisoft is the greatest! Thanks! KenB
  3. Description of BigLock Ransomware There are no decryptors for this yet. Encrypted files are recommended to be saved, maybe in the future there will be a decryptor.
  4. my all files is decrypt to .covm extensions and after use the stop djvu tool he say Notice: this ID appears be an offline ID, decryption MAY be possible in the future _readme.txt
  5. Hello team, Some of my files has been encrypted as . corona-lock can you please help me to decrypt Thanks
  6. It appears to have been a Cloudflare issue, and was resolved about an hour later: https://www.cloudflarestatus.com/incidents/gzrmb3r6zcxv Please try the decrypter again, and let me know if it's working now.
  7. This is a newer variant of STOP/Djvu. Fortunately your ID is an offline ID, however we don't yet have the private key for it. I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant. There is more information at the following link: https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/
  8. The decrypter was created by @Demonslay335 and you can send him a message on our forums if you'd like to thank him. Please note that he won't answer requests for technical support or requests for help with decryption. I handle that for him.
  9. This is a newer variant of STOP/Djvu, and your ID is an online ID, so there is currently no way to decrypt your files. There is more information at the following link: https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/
  10. This is a newer variant of STOP/Djvu. If you have an offline ID, then once we can find the decryption key for this variant and add it to our database you should be able to recover your files. However, if you have an online ID (which is more likely) then it will not be possible to recover your files. There is more information at the following link: https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/
  11. Our recommendation is to save a backup of your encrypted files and keep it in a safe place in case decryption is possible at some point in the future. We also recommend keeping an eye on BleepingComputer's newsfeed, as they will usually report on new developments with ransomware decrypters: https://www.bleepingcomputer.com/ If you have an RSS feed reader, then they also have an RSS feed so that you don't have to manually check for news: https://www.bleepingcomputer.com/feed/
  12. You can download the latest version (1.0.0.4) of the decrypter at the following link: https://www.emsisoft.com/ransomware-decryption-tools/stop-djvu You can submit file pairs at the following link: https://decrypter.emsisoft.com/submit/stopdjvu/ There is additional information about the decrypter in the news article at the following link (instructions for use start about half way through the article): https://www.bleepingcomputer.com/news/security/stop-ransomware-decryptor-released-for-148-variants/ Our instructions for using the decrypter can be found at the following link: https://decrypter.emsisoft.com/howtos/emsisoft_howto_stopdjvu.pdf A series of common questions and answers regarding the STOP/Djvu ranomware and the decrypter can be found at the following link: https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/
  13. This is a newer variant of STOP/Djvu. Fortunately your ID is an offline ID, however we don't yet have the private key for it. I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant. There is more information at the following link: https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/
  14. This is a newer variant of STOP/Djvu. If you have an offline ID, then once we can find the decryption key for this variant and add it to our database you should be able to recover your files. However, if you have an online ID (which is more likely) then it will not be possible to recover your files. There is more information at the following link: https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/
  15. First and foremost, your files aren't "infected". They're encrypted. You need at least one original JPG file from each source you've obtained them from. Check and see if you've ever shared any of your JPG files with others. Have you sent any via e-mail, or shared them via file sharing services (OneDrive, Google Drive, Dropbox, etc)? Have you copied them to USB flash drives, CD's or DVD's, or external hard drives?
  16. have tried to to remove pezi file with emsisoft free ransomware but saying No key for New Variant offline ID: d7sMcb3TQy9KiKHXL8qBlaPJj8oSFp6VQxiYZit1 Notice: this ID appears be an offline ID, decryption MAY be possible in the future
  17. Last week
  18. Hello. I have the same problem.... I use in my files emsisoft but this say: error en el servidor remoto (404) no se encontró... And other say: no se encontró (403) prohibido. Any have a solution for this? Thankyou so much
  19. Largest of private bytes and Working set for anything listed in my Process Explorer. I have 4 gig ram on this old workhorse.
  20. Win 8.1 64 bit I can't remember what a2start's memory use normally is, but right now mine has (according to Process Hacker) a "Private Bytes" value of 1.43 GB and a /working set/ of 1.38 GB. A custom scan (which looked at 1.4m objects) finished about an hour and a quarter ago; that ran with debug-logging on. Debug-logging has been disabled and re-enabled since then, without affecting a2start's memory use. I understand that this working set is only /virtual storage/ but commited pages still have to be backed in either RAM or the page file. I've 8 GB RAM and just over 8 GB of pagefile, so about 16.1 GB is the maximum amount of commitable vs ... and on that basis 1.38 GB doesn't seem like a vast amount - about 8.6% of the system's overall maximum. But it's still the largest WS of any application on the system by a huge margin.
  21. stapp

    NEW beta 10204

    Just thought I'd run a little check to see if EAM updates do get through when Network Lockdown is turned on. They do. Also Frank would you be kind enough to answer my question here. https://support.emsisoft.com/topic/33491-beta-10204/?tab=comments#comment-205016
  22. No key for New Variant online ID: 0Tnv3XUbWegkLzdhwcfPN5v5owDBnAjpaR3voGt7 Notice: this ID appears to be an online ID, decryption is impossible
  23. There's the possibility that law enforcement may be able to catch the criminals or otherwise gain access to their servers and release their database of private keys for use in decrypters. In case this happens I recommend keeping a backup of your encrypted files so that you have them in a safe place.
  24. I always start my custom scans (usually done once per week) by importing settings, and what's more it's normal for me to import first a set of settings I don't plan to use, then import the set I do wish to use. I know that's odd, but I do it because it means I always see something change in the GUI regardless of whatever was displayed before the import. I have a scan running now, which I started in exactly the same way as this morning's attempted one... except this time I do have debug logging on...
  25. thanks, this probably is an import settings issue, we will check and fix. Does this happen every time after you imported your settings ?
  26. hallo, soweit alle ok. Recher ist da und läuft. Emisoft instaliert. Allerdings hab ich kein Desktop Symbol........ wo ist das hin?? Also die Benutzeroberfläche zum Scannen ... Einstellungen ändern......
  1. Load more activity
  • Newsletter

    Want to keep up to date with all our latest news and information?
    Sign Up