Amigo-A

Hello. 

There is a general guide here, which describes in which cases decryption is possible, and in which it is not possible.

You and we cannot change this process in any way.

And no one can decrypt the files, only the extortionists themselves, if they do not will want to deceive you. 
There are several ways to recover some types of files, but they are not easy.

Hello. 

There is a general guide here, which describes in which cases decryption is possible, and in which it is not possible.

You and we cannot change this process in any way.

And no one can decrypt the files, only the extortionists themselves, if they do not will want to deceive you. 
There are several ways to recover some types of files, but they are not easy.

Hello. 

There is a general guide here, which describes in which cases decryption is possible, and in which it is not possible.

You and we cannot change this process in any way.

And no one can decrypt the files, only the extortionists themselves, if they do not will want to deceive you. 
There are several ways to recover some types of files, but they are not easy.

coval4uk

If you attached a malicious file, then it was already deleted before I saw it.
You can send files to me in another way.

You need to attach an zip-archive in which to put a ransom note and several encrypted files + originals. 

Hello @ahmedmahmoud

If you think that your files have been attacked, for example, encrypted or blocked, then you need to attach an zip-archive with files to the message.
Place 2-3 encrypted (blocked) files and a ransom note in the zip-archive.
Usually, when hackers encrypt or lock files, they leave a ransom note where they write their demands, indicate the amount of the ransom.
We will try to determine which ransomware attacked your files.

Hello. Decryption is possible only in rare cases.

You need to read the guide for this issue, only the first part.
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

 

 

Hello. Decryption is possible only in rare cases.

You need to read the guide for this issue, only the first part.
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Hello. Decryption is possible only in rare cases.

You need to read the guide for this issue, only the first part.
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Hola. Esta es una de las variantes del 'STOP Ransomware'.

Lea esta guía.

Muchas opciones. Este distribuido utilizando software reenvasado y pirateado. Muy raramente se puede descifrar si alguien compró y entregó la clave a los desarrolladores del Emsisoft Descifrador. No hay otra manera.

 

Quote

w6IKbZ9nGWp1wM5W7MK8obmynSc0Hx2FVdvsSzt1
Notice: this ID appears be an offline ID, decryption MAY be possible in the future

If the identifier ends with "t1", then decryption is technically possible in the future, when the Emsisoft Decryptor receives the key for this variant.
Sometimes someone buys such a key and voluntarily gives it to the developers of the Emsisoft Decryptor. Then the key will be added to this decryptor. We cannot speed up this process.

More info >>

It is recommended that every 2 weeks or once a month you download the decryptor again and test the decryptability of the encrypted files. The encrypted files should be moved to an external drive and one folder with the files should be left to be checked. 
If some other ransomware gets onto your computer, it may re-encrypt the files. Then the chances of decryption will be even less.

The extortionists behind him have been involved in extortion for almost 5,5 years. Until now, the police have not been ordered to neutralize them, so extortionists act arrogantly and with impunity.

 Maybe another decryption will come up in the future.

Read this guide to find out if your files can be decrypted. 

Yes. It's better than removing files.

Hello

Quote

***t1

If the identifier ends with "t1", then decryption is technically possible in the future, when the Emsisoft Decryptor receives the key for this variant.
Sometimes someone buys such a key and voluntarily gives it to the developers of the Emsisoft Decryptor. Then the key will be added to this decryptor. We cannot speed up this process.

More info >>

It is recommended that every 2 weeks or once a month you download the decryptor again and test the decryptability of the encrypted files. The encrypted files should be moved to an external drive and one folder with the files should be left to be checked. 
If some other ransomware gets onto your computer, it may re-encrypt the files. Then the chances of decryption will be even less.

Hello

Quote

***t1

If the identifier ends with "t1", then decryption is technically possible in the future, when the Emsisoft Decryptor receives the key for this variant.
Sometimes someone buys such a key and voluntarily gives it to the developers of the Emsisoft Decryptor. Then the key will be added to this decryptor. We cannot speed up this process.

More info >>

It is recommended that every 2 weeks or once a month you download the decryptor again and test the decryptability of the encrypted files. The encrypted files should be moved to an external drive and one folder with the files should be left to be checked. 
If some other ransomware gets onto your computer, it may re-encrypt the files. Then the chances of decryption will be even less.

Quote

Stop Djavu com extensões de arquivos .voom e .udla.

Ola @CleitoDias

Você precisa usar o Google Tradutor. https://translate.google.com

Unfortunately, this is the result of a STOP Ransomware attack. The extortionists behind him have been involved in extortion for almost 5,5 years. Until now, the police have not been ordered to neutralize them, so extortionists act arrogantly and with impunity.

The problem is serious and it is impossible to decrypt the files if an online key was used during encryption. You can read more in the article. You need use Google Translator.

If your files received two different extensions after encryption, then you were attacked twice. In each case, a different key may be used.

If the online key was used twice, then decrypting the files is even more problematic. You can check the ransom notes in each folder and compare the Personal ID.

Hola Carlos!

If say correct, then it is an .jhbg extension. At the beginning of the ID there are numbers 0460. 

Unfortunately, this is the result of a STOP Ransomware attack. The extortionists behind him have been involved in extortion for almost 5,5 years. Until now, the police have not been ordered to neutralize them, so extortionists act arrogantly and with impunity.

The problem is serious and it is impossible to decrypt the files if an online key was used during encryption. You can read more in the article. You need use Google Translator.

 

Hola Federico!

Quote

*.dmay and *.msjd extension

Unfortunately, this is the result of a STOP Ransomware attack. The extortionists behind him have been involved in extortion for almost 5,5 years. Until now, the police have not been ordered to neutralize them, so extortionists act arrogantly and with impunity.

The problem is serious and it is impossible to decrypt the files if an online key was used during encryption. You can read more in the article. You need use Google Translator.

If your files received two different extensions after encryption, then you were attacked twice. In each case, a different key may be used.

If the online key was used twice, then decrypting the files is even more problematic. You can check the ransom notes in each folder and compare the Personal ID.

https://www.bleepingcomputer.com/forums/t/771463/

I got your files from the BC forum. In that case, let's continue there.

Hello.

Add a few more different encrypted files.

Antivirus software does not decrypt files. 
To decrypt, you need a decryptor that supports the "Stop Ransomware" variant that has encrypted your files.
You can determine whether decryption is possible by using the guide and downloading the Emsisoft Decryptor. 

Hello.

This tool was made 6 years ago. There is a date. He won't help, if the files were encrypted with a newer ransomware variant.

Quote

Your personal ID:
0452***t1 

En el futuro será posible descifrar archivos. Debe transferir todos los archivos cifrados a una unidad externa y desconectarla de su computadora.
Deje solo una carpeta con archivos cifrados (copia) en su computadora y periódicamente (una vez cada dos semanas), descargue un nuevo descifrador y verifique la capacidad de descifrar archivos.
No podemos acelerar el proceso de descifrado. Alguien tiene que comprar la clave del ransomware y dársela a los desarrolladores para que la agreguen al descifrador.

 

Hola @josemontele

Adjuntar un archivo _readme.txt  al mensaje.