Recommended Posts

9 minutes ago, Tahir Moeen said:

Sorry to bother you again. Pl contact demonslay335  about reminding the solution of my problem/issue ( nelasod ransomware)

He's still working on it. Don't worry, we'll let you know once he's ready to help you decrypt your files. ;)

Share this post


Link to post
Share on other sites

please help me all my data is nelasod ransomware

ATTENTION!

Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-2P5WrE5b9f
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.


To get this software you need write on our e-mail:
[email protected]

Reserve e-mail address to contact us:
[email protected]

Your personal ID:
132KldYsmpnGGf4SsNNoDBzRHoERsNCDJXFi0OetZhqz2yruT2Ltt1

 

Share this post


Link to post
Share on other sites
8 hours ago, yasser said:

Your personal ID:
132KldYsmpnGGf4SsNNoDBzRHoERsNCDJXFi0OetZhqz2yruT2Ltt1

Hello @yasser

Info for this variant:  STOP-Decrypter decoder does not work with this ID and online-key. Its development is completed and will not be continued.

Read the description and list of supported versions.

Share this post


Link to post
Share on other sites
2 hours ago, Amigo-A said:

Hello @yasser

Info for this variant:  STOP-Decrypter decoder does not work with this ID and online-key. Its development is completed and will not be continued.

Read the description and list of supported versions.

Thanks for answer Amigo-A but I try all STOP-Decrypter but when I push decrypt 

This no key for Id : s1v9s1v9bwwvsrcbj435r1yiuuyiqj1rt09sec4gdxgb

Is deferent id

You can see photo 
Download Image

Screenshot_2019-09-19-22-13-28.jpg
Download Image

Screenshot_2019-09-19-22-19-54.jpg
Download Image

Share this post


Link to post
Share on other sites
8 hours ago, yasser said:

Thanks for answer Amigo-A but I try all STOP-Decrypter but when I push decrypt 

This no key for Id : s1v9s1v9bwwvsrcbj435r1yiuuyiqj1rt09sec4gdxgb

That means the ransomware was able to connect to its command and control servers when it infected your computer, and so an online ID and key were created to encrypt your files. There's no way to decrypt your files right away, however if you give us some time then hopefully we'll be able to do something for you.

Share this post


Link to post
Share on other sites
1 hour ago, GT500 said:

That means the ransomware was able to connect to its command and control servers when it infected your computer, and so an online ID and key were created to encrypt your files. There's no way to decrypt your files right away, however if you give us some time then hopefully we'll be able to do something for you.

Thank you for answer 

I will wait to find a solution 

Share this post


Link to post
Share on other sites
14 hours ago, Tahir Moeen said:

Sir any progress from Mr demonslay335 .

Not yet, but it's still being worked on.

Share this post


Link to post
Share on other sites

We have a new decryption service for STOP/Djvu available. There's more information and instructions on how to use it at the following links:
https://www.bleepingcomputer.com/news/security/stop-ransomware-decryptor-released-for-148-variants/
https://blog.emsisoft.com/en/34375/emsisoft-releases-new-decryptor-for-stop-djvu-ransomware/

Share this post


Link to post
Share on other sites

Hello. Mr Amigo-A & Mr GT500

How are you?  Did you forgot me? 

I will be grateful if you could check it with Mr. demonslay335. I have requested him but he did not replied. 

Regards

TAHIR

Share this post


Link to post
Share on other sites

Hello @Tahir Moeen

Above GT500 informed you.

We have a new Decryptor and Decryption Service for STOP/Djvu available. There's more information and instructions on how to use it at the following link:
https://blog.emsisoft.com/en/34375/emsisoft-releases-new-decryptor-for-stop-djvu-ransomware/

You need to try the Decryptor and the Decryption service, maybe some of your files will be decrypted with this one method.

1/ Dwnload new Emsisoft Decryptor for STOP Ransomware:  https://www.emsisoft.com/ransomware-decryption-tools/stop-djvu

2/ With the new Decryption Service, you need to find the largest encrypted files of different formats (PNG, JPG, JPEG, PDF, DOC, DOCX, MP3, MP4 ...) and the original unencrypted file for each type. Then upload it to the service. If the decryption service will found the decryption key, then all files of this type can be decrypted.
Also you need to do with each file type (PNG, JPG, JPEG, PDF, DOC, DOCX, MP3, MP4 ...) that you need to decrypt.

At first glance it seems that it is impossible to find a pair of encrypted + original files, but this is not so.

Here is a sample list where you can find the originals of the encrypted files :

1) on flash drives, external drives, CD / DVD, memory cards of the camera, phone;
2) in attachments of emails sent or received by you;
3) among the copies of shared photos of friends, relatives (in their PC) that you gave;
4) among the uploaded photos in the social. networks, including via smartphone and tablet;
5) among the uploaded photos to cloud services (Google Disk,  OneDrive, Yandex Disk etc.);
6) on the sites of ads, forums, where you could previously send photos or images;
7) among unencrypted files, copies, renamed files on your PC;
8 ) on an old PC or disk, from where you transferred photos and documents to a new PC;
9) you can re-upload from the Internet previously downloaded photos, pictures, etc .;
10) you can use sample images supplied with Windows;
11) take photos or pictures that you previously posted on the avatar on the forums.
12) extract previously deleted files from the Recycle Bin or restore it with a special program.
 
If decryption failed ...
 
It is possible that the original file was an inaccurate copy of the encrypted. This could be due to the fact that earlier you yourself reduced or corrected it in the editor, or uploaded to social networks, cloud services, and there the file was somehow automatically changed.
Look for more files and try different pairs of encrypted and original files with the same name. Very often files can have the same name, but are not a copy of each other. Vocabulary used in any language is limited. The possibilities of PCs, cameras and other devices for taking photos are also limited. In cameras and mobile devices, names for photos are given automatically according to a specific format, so photos with the name from IMG_0001.JPG to IMG_9999.JPG can be quite a lot in different years. Smartphones can give photos more original names, such as IMG_20171012_170451.jpg - here and the date of shooting, and the sequence number, thus the repetition of the name is unlikely.

Share this post


Link to post
Share on other sites

Hello. Mr Amigo-A & Mr GT500

Hopping tat this will find you in best of your health.

I have tried the new decryption service for STOP/Djvu  but not succeeded .

May be my application method is wrong.

I will be grateful if you explain the procedure of applying new decryption . Just consider me as a layman.

Thanks and regards.

Tahir 

Share this post


Link to post
Share on other sites

Hello, Tahir! Health will help us all! Thanks!

Most likely I have nothing to add to what has been said. 
Developers know better how their program works. Wait, maybe they will have new advice for you. 

Share this post


Link to post
Share on other sites
15 hours ago, Tahir Moeen said:

I have tried the new decryption service for STOP/Djvu  but not succeeded .

May be my application method is wrong.

I will be grateful if you explain the procedure of applying new decryption . Just consider me as a layman.

You didn't have an offline ID, so you'll need to supply file pairs via the submission form so that the decrypter can "learn" how to decrypt your files. There's more information about this at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Share this post


Link to post
Share on other sites

Hello. Mr GT500 &Mr Amigo-A 

Hopping that this will find you in best of your health condition and spirit. 

How are you. ?

I have loaded different pair but does not worked. May be i am not following the correct way.

Is Mr Demonslay335 working on my ransom (nelasod). My computer was infected in July 2019

 

Please check it with Mr. demonslay335. I have requested him but he did not replied. 

Regards

TAHIR

 

Share this post


Link to post
Share on other sites
11 hours ago, Tahir Moeen said:

Is Mr Demonslay335 working on my ransom (nelasod). My computer was infected in July 2019

He's not currently working on older variants. The current decrypter from Emsisoft should be able to decrypt files from all older variants.

 

11 hours ago, Tahir Moeen said:

I have loaded different pair but does not worked. May be i am not following the correct way.

Would it be possible to take a screenshot of the file pair you're using, and post it in a reply for us to see?

Share this post


Link to post
Share on other sites

thank you very much for any one to help people especially Mr. demonslay335

Mr Amigo-A & Mr GT500

I recover all my files 

nelasod ransomware 

thanks 

Share this post


Link to post
Share on other sites

Hello @yasser

Thank you for reporting this good news!
Now you need to better protect your PC. If such an infection return, then recovering the files will be more difficult.

Share this post


Link to post
Share on other sites
9 hours ago, Amigo-A said:

Hello @yasser

Thank you for reporting this good news!
Now you need to better protect your PC. If such an infection return, then recovering the files will be more difficult.

Thanks Amigo-A 

I will an shaa allah

Share this post


Link to post
Share on other sites
On 12/28/2019 at 6:20 AM, GT500 said:

 

On 12/28/2019 at 6:20 AM, GT500 said:

Would it be possible to take a screenshot of the file pair you're using, and post it in a reply for us to see?

Hello. Mr GT500 &Mr Amigo-A 

I have enclosed complete files (both, infected and original) please Help. It is good news that the files of Mr Yaseer Have been required. I am not understanding that why my files are not being recovered.  I may be applying wrong method. Please see the pairs of files and guide me in detail, step by step. I am not an export. I will be grateful.

Regard

Tahir

 

nab vr list.jpg
Download Image

Foreign TA (template).xlsx TA of SE refrsh cours Faislbd.xlsx Evaluation Guide (Consultancy) 24-12-15.pdf Verified Tender Documents.doc nab vr list.jpg.nelasod Foreign TA (template).xlsx.nelasod TA of SE refrsh cours Faislbd.xlsx.nelasod Evaluation Guide (Consultancy) 24-12-15.pdf.nelasod Verified Tender Documents.doc.nelasod

Share this post


Link to post
Share on other sites
On 1/12/2020 at 8:29 AM, Tahir Moeen said:

Hello. Mr GT500 &Mr Amigo-A 

I have enclosed complete files (both, infected and original) please Help. It is good news that the files of Mr Yaseer Have been required. I am not understanding that why my files are not being recovered.  I may be applying wrong method. Please see the pairs of files and guide me in detail, step by step. I am not an export. I will be grateful.

I've asked someone to take a look at the file pairs and see if they can determine why you're having trouble with them.

Share this post


Link to post
Share on other sites

@Tahir Moeen the decrypter should now be able to decrypt all PDF files and Office documents for you. Unfortunately the JPG image wasn't a valid file pair (the data at the end of the files didn't match), so we weren't able to use it.

Share this post


Link to post
Share on other sites

Hello Dear GT 500.

Sorry for delay reply. I will request to please explain step by step the method to extract my pdf and office document. Please what should i do my jpg files

Sorry to bother you again. I am not a computer expert. 

so pl forgive

Regard 

Tahir

Share this post


Link to post
Share on other sites
1 hour ago, Tahir Moeen said:

I will request to please explain step by step the method to extract my pdf and office document.

Do you have Office documents that have been encrypted that you still have an original copy/working copy of?

 

1 hour ago, Tahir Moeen said:

Please what should i do my jpg files

JPG/JPEG files are going to be difficult. Pictures from one camera will all share the same keystream, but pictures from another source (camera, website, etc) will have different keystream. The easiest way to deal with them is probably going to be sorting them into groups based on where the files came from. If you can get good file pairs for each group of JPG pictures, then you should be able to decrypt most of them.

Share this post


Link to post
Share on other sites

The only one I was able to add was the Word document, so you should be able to decrypt those now at least. Most of the rest of the files were too small for me to add, and the JPG image wasn't a valid file pair (the file sizes didn't match).

I'll ask the developer who made the decrypter if he can do anything with the files that are too small, but it would still be best if you could find other file pairs with a larger file size.

Share this post


Link to post
Share on other sites

It looks like there's nothing we can do with the small files. They need to be at least 150 KB, otherwise you'll end up with corrupted files after decrypting.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.