.Kiratos Decryptor

[GT500 593]

On 7/7/2019 at 2:29 PM, Xcf said:

.kiratos virus extension

Personal ID:
072Asdju732sdfAdh1dAZcn629IyyOMmOEYoGDOmaxsTwvupU2MFl0WZV

I've forwarded your ID and MAC addresses to the creator of STOPDecrypter so that he can archive them in case he is able to figure out your decryption key at some point in the future.

All you have to do now is give us some time, and we'll do what we can for you.

[yousef_elmalk 0]

is there any feedback MR GT500?

[GT500 593]

3 hours ago, yousef_elmalk said:

is there any feedback MR GT500?

None yet. We're still working hard on this ransomware though, so please don't give up yet. We haven't.

[yousef_elmalk 0]

hello MR. GT 500

 is there anything is needed from my side MR.GT 500?

[GT500 593]

9 hours ago, yousef_elmalk said:

is there anything is needed from my side MR.GT 500?

Just some more patients. Even though it's taking a lot of time, we haven't given up yet.

[GT500 593]

We have a new decryption service for STOP/Djvu available. There's more information and instructions on how to use it at the following links:
https://www.bleepingcomputer.com/news/security/stop-ransomware-decryptor-released-for-148-variants/
https://blog.emsisoft.com/en/34375/emsisoft-releases-new-decryptor-for-stop-djvu-ransomware/

[yousef_elmalk 0]

is there any feedback MR GT500?

 

[ilterish 0]

On 5/4/2019 at 2:06 AM, GT500 said:

OK. I've already sent your information to the creator of STOPDecrypter, and he'll archive it in case he is able to figure out your decryption key at some point in the future.

Sir No remedy for peet virus? 😭

[yousef_elmalk 0]

MR. GT 500

i tried to upload the same file through tool  but i faced below error 

 

Invalid file pair; encrypted file incorrect size

Download Image

[yousef_elmalk 0]

again and again ......

Download Image

[GT500 593]

2 hours ago, yousef_elmalk said:

MR. GT 500

i tried to upload the same file through tool  but i faced below error 

 

Invalid file pair; encrypted file incorrect size

Your files in your screenshot are exactly the same size. This suggests that you may have made a copy of the encrypted file, removed .kiratos from the name, and tried to use it as your original file in your file pair. This won't work, as the original file can't be encrypted.

[yousef_elmalk 0]

i tried again by selecting the original files without copy and again after removing KIRATOS letter , but the same result ,

i used your tool but i faced below 

 

 

Download Image

[GT500 593]

16 hours ago, yousef_elmalk said:

i tried again by selecting the original files without copy and again after removing KIRATOS letter , but the same result ,

Those are errors on files in your recycle bin.

Did the decrypter actually decrypt any of your other files (documents, music, pictures, etc)?

[yousef_elmalk 0]

Yes, all data had infected 

documents, music, pictures, videos, games ... etc.

Those are errors on files in your recycle bin,   i will remove any data inside it and try again 

 

File: C:\Users\Z\Desktop\elle est d'ailleurs.mp3.kiratos.zyaspgnf.kiratos
Error: Unable to decrypt file with ID: gLS3y0S8B1sLghmJRotI5oE48HO2VRo1i8N8qGoT

File: C:\Users\Z\Desktop\IMG_0186.JPG.kiratos.zyaspgnf.kiratos
Error: Unable to decrypt file with ID: gLS3y0S8B1sLghmJRotI5oE48HO2VRo1i8N8qGoT

File: C:\Users\Z\Desktop\Lara Fabian - Adagio (English) Live.mp3.kiratos.zyaspgnf.kiratos
Error: Unable to decrypt file with ID: gLS3y0S8B1sLghmJRotI5oE48HO2VRo1i8N8qGoT

File: E:\sales.xlsx.kiratos.zyaspgnf.kiratos
Error: Unable to decrypt file with ID: gLS3y0S8B1sLghmJRotI5oE48HO2VRo1i8N8qGoT

File: E:\post malone rockstar.MP3.kiratos.zyaspgnf.kiratos
Error: Unable to decrypt file with ID: gLS3y0S8B1sLghmJRotI5oE48HO2VRo1i8N8qGoT

File: E:\Rockstar feat 21savage.mp3.kiratos
Error: Unable to decrypt file with ID: gLS3y0S8B1sLghmJRotI5oE48HO2VRo1i8N8qGoT

File: E:\WhatsApp Image 2019-04-22 at 8.16.24 PM.jpeg.kiratos.zyaspgnf.kiratos
Error: Unable to decrypt file with ID: gLS3y0S8B1sLghmJRotI5oE48HO2VRo1i8N8qGoT

[GT500 593]

Most of those files appear to have been encrypted 3 times (twice by STOP/Djvu, and once by something else).

 

18 hours ago, yousef_elmalk said:

File: E:\Rockstar feat 21savage.mp3.kiratos
Error: Unable to decrypt file with ID: gLS3y0S8B1sLghmJRotI5oE48HO2VRo1i8N8qGoT

This should be decryptable if you are able to supply file pairs for an MP3 file.

[yousef_elmalk 0]

dear MR.GT 500

many of original files are not exist now, it was encrypted, such as my photos, so there is no original files are available, the problem on those files , i donot worry about any files available on internet like songs as i can download it again, my problem in those files that i can never find it again.

so kindly advice 

[GT500 593]

5 hours ago, yousef_elmalk said:

i donot worry about any files available on internet like songs as i can download it again

If you have files you've downloaded that have been encrypted, and you can re-download the originals, then you can use them as your files pairs to help you recover some of your other files. This will work with many types of files, however it won't work with JPEG/JPG pictures, as there's an oddity with the JPEG file format that requires the pictures used in the file pair to be from the same source as the pictures you want to decrypt.