Recommended Posts

Please help my computer was infected by besub ransomware, i tried decrypt using StopDecypter but no result.

Here's the error message

No key for ID: 3OfV7t3oSHGMTLJX2O7gTxqnrYXWDDEq84VwC3t1 (.besub )
Unidentified ID: 3OfV7t3oSHGMTLJX2O7gTxqnrYXWDDEq84VwC3t1 (.besub )
MACs: 2C:41:38:04:93:6F, 88:53:2E:1B:15:71, 00:50:56:C0:00:01, 00:50:56:C0:00:08, 88:53:2E:1B:15:70, 88:53:2E:1B:15:74
Decrypted 0 files, skipped 1

Would you help me.

Share this post


Link to post
Share on other sites

Hello

extension (.besub)

This is the result of the STOP Ransomware attack. I have been tracking the malicious work of this program since December 2017. 
Now on the forum a lot of victims from different variants of this Ransomware. In some cases, the files can be decrypted. 

@Demonslay335  (the developer of the STOPDecrypter) collects information from the victims, writes data and tries to update the STOP Decrypter. After that, victims can try to decrypt the files. A positive result and a lucky chance are not always possible.

Download STOP Decrypter again >>>

First you need to try to decrypt a small group of files, but first you need to make copies of these files.

If STOPDecrypter won't be able to recover your files yet, it can still be used to get information that may be able to help the creator of STOPDecrypter figure out your decryption key. Here's a link to instructions on how to get this information with STOPDecrypter:
https://kb.gt500.org/stopdecrypter 

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.