Anbu

.msop ransomware

Recommended Posts

Hi sir / madam, friends,

My Computer was infected by ransomware .msop and all the documents were encrypted.

is there any solution for this?

please give me a hand to get my documents safe.

my personal key is  0188yTllsd6df9Cmtb3IQdNJCS4QCSeOfkKEooA7uxcyNdBEEj

please I'm begging.

Share this post


Link to post
Share on other sites
On 12/8/2019 at 1:51 PM, Anbu said:

my personal key is  0188yTllsd6df9Cmtb3IQdNJCS4QCSeOfkKEooA7uxcyNdBEEj

This is a newer variant of STOP/Djvu, and your ID is an online ID, so there is currently no way to decrypt your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Share this post


Link to post
Share on other sites

My recommendation for now is to keep a backup of your encrypted files in case it's possible to decrypt them in the future.

  • Like 1

Share this post


Link to post
Share on other sites
On 12/13/2019 at 11:37 AM, GT500 said:

My recommendation for now is to keep a backup of your encrypted files in case it's possible to decrypt them in the future.

sure. thank you.

Share this post


Link to post
Share on other sites
On 12/28/2019 at 12:09 PM, Anbu said:

hi, any progress in my matter please?

No.

If private keys for STOP/Djvu are made available, then BleepingComputer would more than likely report on it, so I recommend keeping an eye on their news to see if there are any major developments with this ransomware:
https://www.bleepingcomputer.com/

Share this post


Link to post
Share on other sites

@Anbu

Some STOP variants are known to install malware in order to ensure that newly added files are encrypted.

Let's make sure the is no active malware infection present, and it there is then we can remove it.

Download to your Desktop:

 

NOTE: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

 

NOTE: If you are unable to download FRST from the infected system, FRST can be saved to and run from a USB flash drive.

 

  • Run Farbar Recovery Scan Tool (FRST):
    • Double-click to run it. When the tool opens click Yes to the disclaimer.

 

NOTE: DO NOT change any of the default settings. If you do we will just close your logs and ask for new ones ran with FRST's default settings.

 

    • Press the Scan button.
    • Farbar Recovery Scan Tool will produce the following logs:
      • FRST.txt
      • Addition.txt

Share this post


Link to post
Share on other sites
On 4/12/2020 at 9:57 AM, Anbu said:

please help me . Is any progress to recover my encrypted files?

No. You have an online ID. No progress can be made until private keys are released either by law enforcement or the criminals for use in decrypters.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.