Recommended Posts

My files are encrypted by kiratos.

I used Stop decrypter but it did not work. I can provide an original file and encrypted one.

It is quite important. I need this files to submit my thesis

Share this post


Link to post
Share on other sites

Any files encrypted with the .kiratos extension are related to a newer variant of STOP (DJVU) Ransomware.

Please read the first page here for a summary of this ransomware, it's variants and possible decryption solutions with instructions
AND the
***IMPORTANT: @ ALL VICTIMS.... note at the top. "Before asking questions...PLEASE READ these Frequently Asked Questions (FAQs)."

You need to post the required information (i.e. Personal ID, Extension of files & MAC (physical) Address of the infected computer) in the above topic if STOPDecrypter is unable to decrypt your files so the developer, Demonslay335 (Michael Gillespie), can archive your information in case a future solution becomes available.

Share this post


Link to post
Share on other sites

STOPDecrypter is unable to decrypt the files.

Please find below the required information: 

ID: e4Z7Ued2uSyQfbA7vS8VKtF2dGKGH8qEQ4E1Uht1 (.kiratos )
[*] ID: e4Z7Ued2uSyQfbA7vS8VKtF2dGKGH8qEQ4E1Uht1 (.pdf )

[*] MAC: 5E:93:A2:E9:0C:C5
[*] MAC: 00:FF:72:52:C9:D4
[*] MAC: 5C:93:A2:E9:0C:C6
[*] MAC: 1E:93:A2:E9:0C:C5
[*] MAC: 5C:93:A2:E9:0C:C5
[*] MAC: 00:FF:CE:51:A2:42
[*] MAC: 68:F7:28:25:EE:63
[*] MAC: 00:50:56:C0:00:01
[*] MAC: 00:50:56:C0:00:08

Share this post


Link to post
Share on other sites
8 hours ago, Mehdi Ben Amor said:

ID: e4Z7Ued2uSyQfbA7vS8VKtF2dGKGH8qEQ4E1Uht1 (.kiratos )

That's an offline ID, however support for it has yet to be added to STOPDecrypter. I'm going to send you a private message with more information.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.