rgerber 0 Report post Posted March 3, 2019 I need help decrypting my files. All the incrypted files end with: .promok I can't find any decryption software? Please help! I'm despirate. Quote Share this post Link to post Share on other sites
GT500 714 Report post Posted March 4, 2019 This appears to be a new variant. So far the ID's of victims have not matched the known offline ID, so the decrypter hasn't been able to decrypt files for anyone. All you can do right now is run the STOPDecrypter and paste the information it gives you into a reply. You can follow the instructions at the link below:https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-tro-djvu-rumba-openmetxt-support-topic/page-21#entry4667165 Quote Share this post Link to post Share on other sites
Amigo-A 81 Report post Posted March 29, 2019 For this case, there may be a real solution. Files are encrypted with STOP Ransomware with extension .promok Use the STOPDdecrypter https://download.bleepingcomputer.com/demonslay335/STOPDecrypter.zip /// If it doesn't help, need to tell Demonslay335. Quote Share this post Link to post Share on other sites
visterman 0 Report post Posted August 25, 2019 plz ,help me to decrypt my files the following message is taken from STOPDecrypter : [!] No keys were found for the following IDs: [*] ID: c6sBODdV0QWTQDWrTOKf1sdQ0w778V8uZ0qrJqNq (.vesrato ) [*] ID: c6sBODdV0QWTQDWrTOKf1sdQ0w778V8uZ0qrJqNq (.docx ) Please archive these IDs and the following MAC addresses in case of future decryption: [*] MACs: 00:25:64:92:10:F2, BA:76:3F:38:7E:B4, BA:76:3F:38:76:B4, 00:FF:F7:CC:82:79, B8:76:3F:38:7E:B4 This info has also been logged to STOPDecrypter-log.txt Quote Share this post Link to post Share on other sites
GT500 714 Report post Posted August 27, 2019 On 8/25/2019 at 2:03 AM, visterman said: [!] No keys were found for the following IDs: [*] ID: c6sBODdV0QWTQDWrTOKf1sdQ0w778V8uZ0qrJqNq (.vesrato ) [*] ID: c6sBODdV0QWTQDWrTOKf1sdQ0w778V8uZ0qrJqNq (.docx ) Please archive these IDs and the following MAC addresses in case of future decryption: [*] MACs: 00:25:64:92:10:F2, BA:76:3F:38:7E:B4, BA:76:3F:38:76:B4, 00:FF:F7:CC:82:79, B8:76:3F:38:7E:B4 This info has also been logged to STOPDecrypter-log.txt I've forwarded your ID and MAC addresses to the creator of STOPDecrypter so that he can archive them in case he is able to figure out your decryption key at some point in the future. All you have to do now is give us some time, and we'll do what we can for you. Quote Share this post Link to post Share on other sites
GT500 714 Report post Posted October 19, 2019 We have a new decryption service for STOP/Djvu available. There's more information and instructions on how to use it at the following links:https://www.bleepingcomputer.com/news/security/stop-ransomware-decryptor-released-for-148-variants/https://blog.emsisoft.com/en/34375/emsisoft-releases-new-decryptor-for-stop-djvu-ransomware/ Quote Share this post Link to post Share on other sites
