kit_phong2 0 Report post Posted April 11, 2019 https://drive.google.com/drive/folders/18VsXe8dHYG36C23e-8auFuZnSuZJjbmk help me Quote Share this post Link to post Share on other sites
stapp 150 Report post Posted April 11, 2019 I recommend uploading a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with:https://id-ransomware.malwarehunterteam.com/ You can paste a link to the results into a reply if you would like one of our experts to review them. Quote Share this post Link to post Share on other sites
Amigo-A 135 Report post Posted April 11, 2019 This is new variant of STOP-Djvu Ransomware This extension (.grovat) is in the decryption list, but your files are not can't decrypted yet. I checked. You need to leave a request to the developer of STOPDecryptor. Quote Share this post Link to post Share on other sites
GT500 835 Report post Posted April 11, 2019 9 hours ago, Amigo-A said: This is new variant of STOP-Djvu Ransomware This extension (.grovat) is in the decryption list, but your files are not can't decrypted yet. I checked. You need to leave a request to the developer of STOPDecryptor. They appear to have already done so:https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-support-topic/page-114#entry4756951 Quote Share this post Link to post Share on other sites
Amigo-A 135 Report post Posted April 12, 2019 It's good. It would be even better if the victim soon received the files back. Quote Share this post Link to post Share on other sites
GT500 835 Report post Posted October 19, 2019 We have a new decryption service for STOP/Djvu available. There's more information and instructions on how to use it at the following links:https://www.bleepingcomputer.com/news/security/stop-ransomware-decryptor-released-for-148-variants/https://blog.emsisoft.com/en/34375/emsisoft-releases-new-decryptor-for-stop-djvu-ransomware/ Quote Share this post Link to post Share on other sites
