Peter Ishola

Help, my files are encrypted with .codnat extension

Recommended Posts

Extension .codnat to encrypted files — this is the result of the work of STOP Ransomware

You need to find the _readme.txt file - this is a ransom note from extortionists. It is very important and will be needed for decryption.

Follow the instructions in the first post of this support topic and FAQ and provide the personal ID and MAC addresses of the infected machine ASAP.

You at now do not need to hurry and do not need to try to decrypt the files yet.
The most important thing now for your files is to read the instructions and provide the required data.

-----------------------------

For more information

STOP Ransomware encrypts files all over the world, in all countries where there is high-speed Internet.

Only one volunteer specialist Demonslay335 decrypts the files. He found a way to decrypt files encrypted with offline keys in some cases.

If your files were encrypted using offline keys, then the files can be decrypted. 

If the offline key was partially used (after the Internet connection was disconnected), only part of the files can be decrypted. This method 'using offline keys' has been implemented in STOPDecrypter.

Share this post


Link to post
Share on other sites

There are further instructions on using STOPDecrypter at the following link, which will help you provide us information that may be helpful for us to try to figure out your decryption key at some point in the future:
https://kb.gt500.org/stopdecrypter

Share this post


Link to post
Share on other sites
14 hours ago, Amigo-A said:

Extension .codnat to encrypted files — this is the result of the work of STOP Ransomware

You need to find the _readme.txt file - this is a ransom note from extortionists. It is very important and will be needed for decryption.

Follow the instructions in the first post of this support topic and FAQ and provide the personal ID and MAC addresses of the infected machine ASAP.

You at now do not need to hurry and do not need to try to decrypt the files yet.
The most important thing now for your files is to read the instructions and provide the required data.

-----------------------------

For more information

STOP Ransomware encrypts files all over the world, in all countries where there is high-speed Internet.

Only one volunteer specialist Demonslay335 decrypts the files. He found a way to decrypt files encrypted with offline keys in some cases.

If your files were encrypted using offline keys, then the files can be decrypted. 

If the offline key was partially used (after the Internet connection was disconnected), only part of the files can be decrypted. This method 'using offline keys' has been implemented in STOPDecrypter.

Okay, But I already reset my Windows and i don't know how to get the _readme.txt file.

Share this post


Link to post
Share on other sites
9 hours ago, GT500 said:

There are further instructions on using STOPDecrypter at the following link, which will help you provide us information that may be helpful for us to try to figure out your decryption key at some point in the future:
https://kb.gt500.org/stopdecrypter

Thanks GT500. I followed the process and i have retreived the Personal ID and the MAC Address.

Share this post


Link to post
Share on other sites
13 hours ago, Peter Ishola said:

Thanks GT500. I followed the process and i have retreived the Personal ID and the MAC Address.

OK. Did you post it at BleepingComputer, or did you want to post it here for me to pass on to the creator of STOPDecrypter?

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.