Sign in to follow this  
zoubirtech

Old Variant ID DJVUT

Recommended Posts

my pc is infected with rancomeware djvut Old Variant ID : 7z2rgBvvjJNMoW03y44ExXiBjFtUffdlUS5EYRXe
I go through the site https://decrypter.emsisoft.com/submit/stopdjvu/
to decrypt my files using original file it works, but with a single file and each file is started with a defferent bytes.
After submitting, I receive this message
"Your file pair for" .mp3 "files has been processed.
Please note that this will only allow the tool to decrypt files matching the following criteria:
- Starts with bytes: 616374696F
- Were encrypted with ID: 7z2rgBvvjJNMoW03y44ExXiBjFtUffdlUS5EYRXe "

Capture.PNG
Download Image

Share this post


Link to post
Share on other sites
9 hours ago, zoubirtech said:

each file is started with a defferent bytes

The first 5 bytes are different for each type of file. To complicate matters, JPG/JPEG images are different, and I would believe only the first 3 bytes are exactly the same and the next two can vary depending on what saved the JPG image. You're going to need different file pairs for every type of file you need to decrypt, and you're going to need different file pairs for every source of JPG images in order to be able to decrypt all of them.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.