Nabil Nawaz

All files got encrypted and showing *.etols* extension

Recommended Posts

all the files in my computer are showing *.etols* extension after the files extension such as , mypic.jpg.etols

everyfile is like that how can i recover or remove this thing from my computer and make the files usable again, currently all are unusable and its my very very important data and i am a bit worried now.

i tried to remove that extension manually but after that file remains unusable. Does EMSSISOFT decrypter help to recover or decrypt these files or it yet to receive new updates regarding etols files decryption?

Share this post


Link to post
Share on other sites

I recommend uploading a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with:
https://id-ransomware.malwarehunterteam.com/

You can paste a link to the results into a reply if you would like for me to review them.

Share this post


Link to post
Share on other sites
On 4/11/2019 at 2:41 AM, GT500 said:

I recommend uploading a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with:
https://id-ransomware.malwarehunterteam.com/

You can paste a link to the results into a reply if you would like for me to review them.

hello sir,

here is the link, i uploaded sample file + the note someone left in every folder of my computer.

https://id-ransomware.malwarehunterteam.com/identify.php?case=7e1430613fbc8a573349debc3d64ce9fe54c53a2

 

below is the note that he left in my computer in every folder

ATTENTION!

Don't worry my friend, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-xuSAEnnA8P
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.


To get this software you need write on our e-mail:
[email protected]

Reserve e-mail address to contact us:
[email protected]

Your personal ID:
064bervcogcSSU03CqpW27LQxhhFkjWnOtHwNYI5XGAZISTBIq

Share this post


Link to post
Share on other sites
On 4/11/2019 at 3:22 PM, Amigo-A said:

This is new variant of STOP-Djvu Ransomware

It is not yet in the decryption list.
You need to leave a request to the developer of STOPDecryptor. 

okay, i just have left a reply with its info, hope it gets updated soon so people can get their precious files back! i saw one more entry there related to this type of ransomware.

Share this post


Link to post
Share on other sites

In fact, a lot of them.
Michael told me a month ago that he already had about 600 cases. After that, he was able to update the STOPDecrypter 2 times. 
It is necessary to hope for the best, but do not forget that decoding is not always possible.

Share this post


Link to post
Share on other sites
3 hours ago, Amigo-A said:

In fact, a lot of them.
Michael told me a month ago that he already had about 600 cases. After that, he was able to update the STOPDecrypter 2 times. 
It is necessary to hope for the best, but do not forget that decoding is not always possible.

okay we can just hope :( data is very important, do they leave a comment in comments section when they update the software so that the users can download the new verison?

Share this post


Link to post
Share on other sites

Yes. On the BleepingComputer forum, on twitter, here on the Emsisoft forum also. 
And on my two sites too (they are in my signature), a translation into English in the title of each new article.

Share this post


Link to post
Share on other sites
8 hours ago, Amigo-A said:

Yes. On the BleepingComputer forum, on twitter, here on the Emsisoft forum also. 
And on my two sites too (they are in my signature), a translation into English in the title of each new article.

okay, pretty sure Emsisoft will also roll out decrypter for .etols extension soon 

Share this post


Link to post
Share on other sites
On 4/13/2019 at 2:49 PM, Nabil Nawaz said:

Your personal ID:
064bervcogcSSU03CqpW27LQxhhFkjWnOtHwNYI5XGAZISTBIq

Just as a note, this ID does not appear to be an offline ID. While this doesn't mean that decryption of the files will be impossible, it does mean that the creator of STOPDecrypter will have to try to figure out your decryption key and send it to you before you'll be able to decrypt your files. Keep in mind that there is no guarantee that he will be able to figure out your decryption key, and it may take him some time before he's able to do so.

Share this post


Link to post
Share on other sites
41 minutes ago, GT500 said:

Just as a note, this ID does not appear to be an offline ID. While this doesn't mean that decryption of the files will be impossible, it does mean that the creator of STOPDecrypter will have to try to figure out your decryption key and send it to you before you'll be able to decrypt your files. Keep in mind that there is no guarantee that he will be able to figure out your decryption key, and it may take him some time before he's able to do so.

okay sir, but what about Emsisoft decrypter? you have many decrypters so can we expect a decrypter for ".etols" extension ransomware?

Moreover, as you mentioned about STOPDecrypter, are there any other who work on decrypters so that I can post a request there as well, please?

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.