rgerber 0 Posted March 3, 2019 Report Share Posted March 3, 2019 I need help decrypting my files. All the incrypted files end with: .promok I can't find any decryption software? Please help! I'm despirate. Quote Link to post Share on other sites
GT500 873 Posted March 4, 2019 Report Share Posted March 4, 2019 This appears to be a new variant. So far the ID's of victims have not matched the known offline ID, so the decrypter hasn't been able to decrypt files for anyone. All you can do right now is run the STOPDecrypter and paste the information it gives you into a reply. You can follow the instructions at the link below:https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-tro-djvu-rumba-openmetxt-support-topic/page-21#entry4667165 Quote Link to post Share on other sites
Amigo-A 136 Posted March 29, 2019 Report Share Posted March 29, 2019 For this case, there may be a real solution. Files are encrypted with STOP Ransomware with extension .promok Use the STOPDdecrypter https://download.bleepingcomputer.com/demonslay335/STOPDecrypter.zip /// If it doesn't help, need to tell Demonslay335. Quote Link to post Share on other sites
visterman 0 Posted August 25, 2019 Report Share Posted August 25, 2019 plz ,help me to decrypt my files the following message is taken from STOPDecrypter : [!] No keys were found for the following IDs: [*] ID: c6sBODdV0QWTQDWrTOKf1sdQ0w778V8uZ0qrJqNq (.vesrato ) [*] ID: c6sBODdV0QWTQDWrTOKf1sdQ0w778V8uZ0qrJqNq (.docx ) Please archive these IDs and the following MAC addresses in case of future decryption: [*] MACs: 00:25:64:92:10:F2, BA:76:3F:38:7E:B4, BA:76:3F:38:76:B4, 00:FF:F7:CC:82:79, B8:76:3F:38:7E:B4 This info has also been logged to STOPDecrypter-log.txt Quote Link to post Share on other sites
GT500 873 Posted August 27, 2019 Report Share Posted August 27, 2019 On 8/25/2019 at 2:03 AM, visterman said: [!] No keys were found for the following IDs: [*] ID: c6sBODdV0QWTQDWrTOKf1sdQ0w778V8uZ0qrJqNq (.vesrato ) [*] ID: c6sBODdV0QWTQDWrTOKf1sdQ0w778V8uZ0qrJqNq (.docx ) Please archive these IDs and the following MAC addresses in case of future decryption: [*] MACs: 00:25:64:92:10:F2, BA:76:3F:38:7E:B4, BA:76:3F:38:76:B4, 00:FF:F7:CC:82:79, B8:76:3F:38:7E:B4 This info has also been logged to STOPDecrypter-log.txt I've forwarded your ID and MAC addresses to the creator of STOPDecrypter so that he can archive them in case he is able to figure out your decryption key at some point in the future. All you have to do now is give us some time, and we'll do what we can for you. Quote Link to post Share on other sites
GT500 873 Posted October 19, 2019 Report Share Posted October 19, 2019 We have a new decryption service for STOP/Djvu available. There's more information and instructions on how to use it at the following links:https://www.bleepingcomputer.com/news/security/stop-ransomware-decryptor-released-for-148-variants/https://blog.emsisoft.com/en/34375/emsisoft-releases-new-decryptor-for-stop-djvu-ransomware/ Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.