kit_phong2 0 Report post Posted April 11 https://drive.google.com/drive/folders/18VsXe8dHYG36C23e-8auFuZnSuZJjbmk help me Quote Share this post Link to post Share on other sites
stapp 124 Report post Posted April 11 I recommend uploading a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with:https://id-ransomware.malwarehunterteam.com/ You can paste a link to the results into a reply if you would like one of our experts to review them. Quote Share this post Link to post Share on other sites
Amigo-A 11 Report post Posted April 11 This is new variant of STOP-Djvu Ransomware This extension (.grovat) is in the decryption list, but your files are not can't decrypted yet. I checked. You need to leave a request to the developer of STOPDecryptor. Quote Share this post Link to post Share on other sites
GT500 559 Report post Posted April 11 9 hours ago, Amigo-A said: This is new variant of STOP-Djvu Ransomware This extension (.grovat) is in the decryption list, but your files are not can't decrypted yet. I checked. You need to leave a request to the developer of STOPDecryptor. They appear to have already done so:https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-support-topic/page-114#entry4756951 Quote Share this post Link to post Share on other sites
Amigo-A 11 Report post Posted April 12 It's good. It would be even better if the victim soon received the files back. Quote Share this post Link to post Share on other sites
