Ruman Afzal 0 Posted December 13, 2019 Report Share Posted December 13, 2019 Please help me all my files on computer are Encrypted ! Quote Link to post Share on other sites
Kevin Zoll 309 Posted December 13, 2019 Report Share Posted December 13, 2019 Hello Ruman, Thank you for contacting Emsisoft Support. Let's make sure of what we're dealing with. Please visit the following website and upload both an encrypted file (between 256KB and 2MB in size would be best) and a ransom note simultaneously for proper identification, and send me the information it provides: https://www.emsisoft.com/ransomware-decryption-tools/ Please be sure to read the information link on the results page, as whether we have a decrypter or not, sometimes someone else's decrypter is listed, or other information is available that might be useful for recovery. You might try undelete software such as Recuva from Piriform, or if your files are very important, it may be worth talking to a company that specializes in negotiating with the criminals that created the ransomware, such as Coveware, at https://www.coveware.com/. They are one of the few companies that do this completely transparently and honestly. If the identification process shows a ransomware that is not decryptable, there is nothing else we can do. We do not recommend paying the ransom unless there is absolutely no other choice. Quote Link to post Share on other sites
Ruman Afzal 0 Posted December 14, 2019 Author Report Share Posted December 14, 2019 10 hours ago, Kevin Zoll said: We have identified "STOP (Djvu)". This ransomware may be decryptable under certain circumstances. Please refer to the appropriate guide for more information. Identified by: sample_extension: .gesd sample_bytes: [0x14BC - 0x14E2] 0x7B33364136393842392D443637432D344530372D424538322D3045433542313442344446357D Click here for more information about STOP (Djvu). Case number: ac0ea6947dbf2568ac18fca65937c03e84df67661576298065 sir this is what the decryptor says.sir not every file is important only the images were importan _readme.txt images (1).jpg.gesd Quote Link to post Share on other sites
GT500 873 Posted December 14, 2019 Report Share Posted December 14, 2019 1 hour ago, Ruman Afzal said: sample_extension: .gesd This is a newer variant of STOP/Djvu, and your ID is an online ID, so there is currently no way to decrypt your files. There is more information at the following link:https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/ Quote Link to post Share on other sites
Ruman Afzal 0 Posted December 15, 2019 Author Report Share Posted December 15, 2019 Sir in future is their any chance the there will be a solution to this problem or should i delete the data Quote Link to post Share on other sites
GT500 873 Posted December 17, 2019 Report Share Posted December 17, 2019 It's possible that law enforcement may catch the criminals eventually, and release their database of keys for use in decrypters. I recommend keeping a backup of your encrypted files in case this happens. Quote Link to post Share on other sites
Ruman Afzal 0 Posted December 17, 2019 Author Report Share Posted December 17, 2019 Thank you sir for the help Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.