Jump to content

David B.

Member
  • Posts

    205
  • Joined

  • Days Won

    13

Posts posted by David B.

  1. Hello,

    "Error" is not quite the word that should be there. It should probably say "Info: No key for New Variant online ID"

    Unfortunately, STOP(Djvu) was updated, and we no longer have any method to decrypt this ransomware unless the encryption occurred some time ago, before the 29th of August 2019.

    Please refer to this forum post for more information: https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

    To summarize, an online ID is impossible to decrypt with current technology. An offline ID is decryptable if any one victim with the same ID pays for the encryption key and reports it to us, so we can add it to our decrypter.

    You can try deleted file recovery software such as Revo from Piriform to see if you can recover older copies of some files, but this does not usually work well. With larger files such as movies or music, sometimes the files will still work if you just change the filenames back to original, since STOP(Djvu) only encrypts the first part of each file. There will of course still be part of the file that is encrypted and effectively corrupt.

    For further questions please refer to bleepingcomputer.com forums: https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/

    And thanks again for contacting Emsisoft.

  2. Unfortunately there is still nothing we can do about this newer STOP(Djvu), and I'm told there won't be for the foreseeable future. My prewritten yet pertinent information about it:

    Unfortunately, STOP(Djvu) was updated, and we no longer have any method to decrypt this ransomware unless the encryption occurred some time ago, before the 29th of August 2019.

    Please refer to this forum post for more information: https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

    To summarize, an online ID is impossible to decrypt with current technology. An offline ID is decryptable if any one victim with the same ID pays for the encryption key and reports it to us, so we can add it to our decrypter.

    You can try deleted file recovery software such as Revo from Piriform to see if you can recover older copies of some files, but this does not usually work well. With larger files such as movies or music, sometimes the files will still work if you just change the filenames back to original, since STOP(Djvu) only encrypts the first part of each file. There will of course still be part of the file that is encrypted and effectively corrupt.

    For further questions please refer to bleepingcomputer.com forums: https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/

    And thanks again for contacting Emsisoft.

  3. Hello Ferchich,

    The file you submitted was encrypted with an online encryption key.

    Refer back to the link ShadowPuterDud gave you, please.

    To summarize, an online ID is impossible to decrypt with current technology. An offline ID is decryptable if any one victim with the same ID pays for the encryption key and reports it to us, so we can add it to our decrypter.

    You can try deleted file recovery software such as Revo from Piriform to see if you can recover older copies of some files, but this does not usually work well. With larger files such as movies or music, sometimes the files will still work if you just change the filenames back to original, since STOP(Djvu) only encrypts the first part of each file. There will of course still be part of the file that is encrypted and effectively corrupt.

    For further questions please refer to bleepingcomputer.com forums: https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/

    And thanks again for contacting Emsisoft.

  4. Hello abhinav,

    Unfortunately, STOP(Djvu) was updated, and we no longer have any method to decrypt this ransomware unless the encryption occurred some time ago, before the 29th of August 2019.

    Please refer to this forum post for more information: https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

    To summarize, an online ID is impossible to decrypt with current technology. An offline ID is decryptable if any one victim with the same ID pays for the encryption key and reports it to us, so we can add it to our decrypter.

    For further questions please refer to bleepingcomputer.com forums: https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/

    And thanks again for contacting Emsisoft.

  5. Hello amitkarmakar and Asif N Siddiqui,

    That extension is used by STOP(Djvu). Unfortunately, STOP(Djvu) was updated, and we no longer have any method to decrypt this ransomware unless the encryption occurred some time ago, before the 29th of August 2019.

    Please refer to this forum post for more information: https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

    To summarize, an online ID is impossible to decrypt with current technology. An offline ID is decryptable if any one victim with the same ID pays for the encryption key and reports it to us, so we can add it to our decrypter.

    For further questions please refer to bleepingcomputer.com forums: https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/

    And thanks again for contacting Emsisoft.

  6. That extension is used by STOP(Djvu). Unfortunately, STOP(Djvu) was updated, and we no longer have any method to decrypt this ransomware unless the encryption occurred some time ago, before the 29th of August 2019.

    Please refer to this forum post for more information: https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

    To summarize, an online ID is impossible to decrypt with current technology. An offline ID is decryptable if any one victim with the same ID pays for the encryption key and reports it to us, so we can add it to our decrypter.

    For further questions please refer to bleepingcomputer.com forums: https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/

    And thanks again for contacting Emsisoft.

  7. Unfortunately, STOP(Djvu) was updated, and we no longer have any method to decrypt this ransomware unless the encryption occurred some time ago, before the 29th of August 2019.

    Please refer to this forum post for more information: https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

    To summarize, an online ID is impossible to decrypt with current technology. An offline ID is decryptable if any one victim with the same ID pays for the encryption key and reports it to us, so we can add it to our decrypter.

    For further questions please refer to bleepingcomputer.com forums: https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/

    And thanks again for contacting Emsisoft.

  8. Hello TeaJay,

    If that happens, please begin by restarting the computer. Sleep mode is traditionally a bit flaky, so I'm not entirely surprised by your report.

    In case there is something interfering that I can spot, please gather two logs using FRST, a tool used worldwide by malware removal experts for free malware removal and tech support, and attach them to a reply to this email. Instructions can be found here: https://help.emsisoft.com/en/1738/how-do-i-run-a-scan-with-frst/

  9. Unfortunately, STOP(Djvu) was updated, and we no longer have any method to decrypt this ransomware unless the encryption occurred some time ago, before the 29th of August 2019.

    Please refer to this forum post for more information: https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

    To summarize, an online ID is impossible to decrypt with current technology. An offline ID is decryptable if any one victim with the same ID pays for the encryption key and reports it to us, so we can add it to our decrypter.

    For further questions please refer to bleepingcomputer.com forums: https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/

    And thanks again for contacting Emsisoft.

  10. Please gather two logs using FRST, a tool used worldwide by malware removal experts for free malware removal and tech support, and attach them to a reply to this email. Instructions can be found here: https://help.emsisoft.com/en/1738/how-do-i-run-a-scan-with-frst/

     Email the logs to [email protected] with either a link to this forum thread, or a description of the issue, and we'll try to help.

  11. If you have the problem of Emsisoft Anti-Malware asking you to re-authenticate, there are a few things that can work. Easiest first, with the most 'drastic' last.

    1. Wait. Sometimes it will sort itself out in a day or so.
    2. Restart the computer. If you're using Windows 10, restart by right-clicking the Windows start button and using restart from the shutdown sub-menu. That performs a full restart instead of the cached rapid restart that is Windows 10's default.
    3. Sign into MyEmsisoft, click 'add device', and download the tagged installer. Don't rename it, and run it when it's done downloading. It might not appear to be doing anything, but it is. Give it 30 seconds, then open Emsisoft Anti-Malware and click update.
    4. Uninstall Emsisoft Anti-Malware, restart the computer (same method as above for Windows 10), then download and run your tagged installer per option 3.

    If everything fails, email us at [email protected], explain what you tried and what if anything didn't go right with each step you tried, and we'll help.

×
×
  • Create New...