Andray

My files are encrypted by .hets Ransomware

Recommended Posts

Hello Andray,

Thank you for contacting Emsisoft Support.

This is a newer variant of STOP/Djvu. If you have an offline ID, then once we can find the decryption key for this variant and add it to our database you will be able to recover your files. However, if you have an online ID (which is more likely) then it will not be possible to recover your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Share this post


Link to post
Share on other sites

Thank you Kevin,

But actually i used this new variant of stop\Djvu,, and i got this results for each file 

Error: Unable to decrypt file with ID: uPjWSsJxITbOfe0hWuy8zWrySbim71aAugzmc2Dp

It seems failed to decrypt.

About Online or offline ID , How I can know which one I have ?

Share this post


Link to post
Share on other sites

Andray,

Then it's mostly an online ID and decryption is not possible.  I suggest that you backup all encrypted files, and store them safely.  If in the future law enforcement or security researchers are able to gain control of the cyber-criminals command & control server and are able to retrieve the encryption keys.

Share this post


Link to post
Share on other sites
9 hours ago, Andray said:

Error: Unable to decrypt file with ID: uPjWSsJxITbOfe0hWuy8zWrySbim71aAugzmc2Dp

That's an online ID.

The offline ID for this variant ends in t1 like most others do.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.