Recommended Posts

[!] No keys were found for the following IDs:
[*] ID: 3FfjY1LjVtjIhAbvit1ZGNu7L2XGrNBWcoqpSEG5 (.ndarod )
Please archive these IDs and the following MAC addresses in case of future decryption:
[*] MACs: 3C:4A:92:58:8B:28, 52:3E:AA:66:8C:1A, 50:3E:AA:66:8C:1A, 00:FF:3C:D1:E3:E8, 00:FF:0C:F5:CD:1F, 50:3E:AA:66:8C:1A
This info has also been logged to STOPDecrypter-log.txt
  • i decrypt many files with offline key..except the files with the shown id above... pleaseeee help me ... i will be very very grateful 

Share this post


Link to post
Share on other sites

We have a new STOP Decryptor by Emsisoft and Decryption Service for STOP/Djvu available. There's more information and instructions on how to use it at the following link:
https://blog.emsisoft.com/en/34375/emsisoft-releases-new-decryptor-for-stop-djvu-ransomware/

1) Download new Decryptor:  https://www.emsisoft.com/ransomware-decryption-tools/stop-djvu

2) With the new Decryption Service, you need to find the largest encrypted files of different formats (PNG, JPG, JPEG, PDF, DOC, DOCX, MP3, MP4 ...) and the original unencrypted file for each type. Then upload it to the service. If the decryption service will found the decryption key, then all files of this type can be decrypted.
Also you need to do with each file type (PNG, JPG, JPEG, PDF, DOC, DOCX, MP3, MP4 ...) that you need to decrypt.

At first glance it seems that it is impossible to find a pair of encrypted + original files, but this is not so.

Here is a sample list where you can find the originals of the encrypted files :

1) on flash drives, external drives, CD / DVD, memory cards of the camera, phone;
2) in attachments of emails sent or received by you;
3) among the copies of shared photos of friends, relatives (in their PC) that you gave;
4) among the uploaded photos in the social. networks, including via smartphone and tablet;
5) among the uploaded photos to cloud services (Google Disk,  OneDrive, Yandex Disk etc.);
6) on the sites of ads, forums, where you could previously send photos or images;
7) among unencrypted files, copies, renamed files on your PC;
8 ) on an old PC or disk, from where you transferred photos and documents to a new PC;
9) you can re-upload from the Internet previously downloaded photos, pictures, etc .;
10) you can use sample images supplied with Windows;
11) take photos or pictures that you previously posted on the avatar on the forums.
12) extract previously deleted files from the Recycle Bin or restore it with a special program.
 
If decryption failed ...
 
It is possible that the original file was an inaccurate copy of the encrypted. This could be due to the fact that earlier you yourself reduced or corrected it in the editor, or uploaded to social networks, cloud services, and there the file was somehow automatically changed.
Look for more files and try different pairs of encrypted and original files with the same name. Very often files can have the same name, but are not a copy of each other. Vocabulary used in any language is limited. The possibilities of PCs, cameras and other devices for taking photos are also limited. In cameras and mobile devices, names for photos are given automatically according to a specific format, so photos with the name from IMG_0001.JPG to IMG_9999.JPG can be quite a lot in different years. Smartphones can give photos more original names, such as IMG_20171012_170451.jpg - here and the date of shooting, and the sequence number, thus the repetition of the name is unlikely.

Share this post


Link to post
Share on other sites

i used the app and it was very useful,, the problem is that it couldn't decrypt some file with the above ID.

i think it is an online key. am asking if there is any way to decrypt them..i am trying for 3 months till now and i can't find the way.. and you are my final hope to solve it.. please

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.