Sign in to follow this  
francisco

.NOSU

Recommended Posts

Hello. First of all I want to thank you for your services. I'm from Argentina and many of the softwares to decrypt files, are too expensive for me to afford (for example, Stellar Data Recovery costs 200 dollars; that equals a minimum wage salary in my country). I have been infected with de STOP-DJVU, and several number of my files are now encrypted with the ".nosu" extension, wich I understand, it's a very recent type of encryption. I work as a digital designer and free-source software developer, and this virus has damaged a lot of my work. I was very unlucky, because when the virus affected my cpu, I was making a backup with two external discs connected, so... the final result was that those discs (with my backup files included) where also affected. I ask you if you are looking for a decryption key for this ".nosu"...  I mean... If it's worth to have faith and be patient, untill you (or other antimalware heroes) find the solution..??? ... I've tried with the EMSISOFT Decryptor for STOP-DVJU but all the results gave me this answer: Error: Unable to decrypt file with ID: I2QRWkFqlYm4CUA6mGfHzikt3FeitXlSGpSntM2k. I'm trully desperate at this point. I ask you for help, because I have used your decryption software in the past (for AVEST ransomware), and it worked perfectly, unlike many others. Once again, thank you, and saludos desde Buenos Aires, Argentina. El trabajo de ustedes es grandioso.

Share this post


Link to post
Share on other sites
1 hour ago, francisco said:

Error: Unable to decrypt file with ID: I2QRWkFqlYm4CUA6mGfHzikt3FeitXlSGpSntM2k

This is a newer variant of STOP/Djvu, and your ID is an online ID, so there is currently no way to decrypt your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

 

1 hour ago, francisco said:

I ask you if you are looking for a decryption key for this ".nosu"...  I mean... If it's worth to have faith and be patient, untill you (or other antimalware heroes) find the solution..???

The private keys for this ransomware are out of our reach for the moment. That being said, there's always a possibility that they may be publicly released at some point in the future, especially if law enforcement is able to bring the criminals behind the ransomware to justice.

Share this post


Link to post
Share on other sites

Thanks for the reply. I really appreciate it. I'm devastated, that's the true.. I don't know what I'm going to do. It's devastating. One last question:  "..if law enforcement is able to bring the criminals behind the ransomware to justice" Has this happened before? Is there any criminal record for this...? Should I hold out hope, if that's the right expression? I'm on my knees at this point. Thank you

Share this post


Link to post
Share on other sites
15 hours ago, francisco said:

One last question:  "..if law enforcement is able to bring the criminals behind the ransomware to justice" Has this happened before?

Yes, it has. Usually in cooperation with a computer security company that assists them in gaining access to the servers operated by the criminals. Admittedly it doesn't happen as often or as quickly as we'd all like, but if there are enough police reports filed by victims then law enforcement agencies are more likely to prioritize this ransomware.

 

15 hours ago, francisco said:

Is there any criminal record for this...?

If law enforcement agencies were to share details about an investigation with us, then we would be required to keep such information private.

Unless of course you mean arrests and prosecutions for ransomware creators/distributors in the past, in which case the answer would also be "yes".

 

15 hours ago, francisco said:

Should I hold out hope, if that's the right expression?

We usually recommend waiting for a solution other than paying the ransom if at all possible. Ultimately what you do is up to you and how quickly you need access to your data.

Share this post


Link to post
Share on other sites

not working 

my data pictures documents videos etc. format changed type of speaking Learners_000.doc.nosu

video pictures documents .nosu

Share this post


Link to post
Share on other sites
On 1/27/2020 at 12:03 AM, taimur said:

not working 

my data pictures documents videos etc. format changed type of speaking Learners_000.doc.nosu

video pictures documents .nosu

This is a newer variant of STOP/Djvu. If you have an offline ID, then once we can find the decryption key for this variant and add it to our database you should be able to recover your files. However, if you have an online ID (which is more likely) then it will not be possible to recover your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.