Sandro 0 Report post Posted March 11, 2019 Bom dia Alguém sabe me dizer qual o programa para descriptografar este tipo de ransomware .promorad2? Abraços Quote Share this post Link to post Share on other sites
GT500 645 Report post Posted March 11, 2019 I recommend uploading a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with:https://id-ransomware.malwarehunterteam.com/ You can paste a link to the results into a reply if you would like for me to review them. Quote Share this post Link to post Share on other sites
quietman7 1 Report post Posted March 13, 2019 The .promorad2 extension is a newer variant of STOP (DJVU) Ransomware and ID Ransomware should confirm the infection. STOPDecrypter has been updated to include support for the .promorad2 variant if you were hit by the OFFLINE KEY - "0h7mFQcjRC3pDgsRcrWZ7K7bdAgvgDosJ24DmXt1" as explained in here. Quote Share this post Link to post Share on other sites
GT500 645 Report post Posted October 19, 2019 We have a new decryption service for STOP/Djvu available. There's more information and instructions on how to use it at the following links:https://www.bleepingcomputer.com/news/security/stop-ransomware-decryptor-released-for-148-variants/https://blog.emsisoft.com/en/34375/emsisoft-releases-new-decryptor-for-stop-djvu-ransomware/ Quote Share this post Link to post Share on other sites
