vindesign 0 Posted March 17, 2020 Report Share Posted March 17, 2020 hi friends, all my files are encrypted with .rezm extension emsisoft not working messaging decryption possible in future. i'm attaching my encrypted image and readme please help me all my E, F, G drives are encrypted. vinayanvelayudhan712.jpg.rezm _readme.txt Quote Link to post Share on other sites
Amigo-A 136 Posted March 17, 2020 Report Share Posted March 17, 2020 Quote Your personal ID: 0211Asd4a7d6oTNOXYrFxLZ6FFJDHoOj4iFOlC2xJsN3KurV05t1 Click HOT-STOP to check version >> .rezm - v0211 of STOP Ransomware A decryptor will work when the decryption key for rezm-variant is detected. Information about the list of extensions of Gero group (RSA) of STOP Ransomware: .gero, .hese, .geno, .xoza*, .seto, .peta, .moka, .meds, .kvag, .domn, .karl, .nesa, .boot*, .noos, .kuub, .reco, .bora, .leto*, .nols, .werd, .coot, .derp, .nakw*, .meka, .toec*, .mosk, .lokf*, .peet, .grod*, .mbed, .kodg, .zobm, .rote*, .msop, .hets, .righ, .gesd*, .merl*, .mkos, .nbes, .piny*, .redl*, .kodc*, .nosu*, .reha, .topi, .npsg*, .btos*, .repp, .alka, .bboo*, .rooe*, .mmnn*, .ooss*, .mool*, .nppp, .rezm*, .lokd*, .foop*, .remk* The * sign indicates that the decryption key has not yet been received. You need to wait until the developers receive the decryption key. Quote Link to post Share on other sites
vindesign 0 Posted March 17, 2020 Author Report Share Posted March 17, 2020 ok i will wait thanks Quote Link to post Share on other sites
Amigo-A 136 Posted March 17, 2020 Report Share Posted March 17, 2020 It is equally important to check the PC for the presence of malware, they can still remain in the system. If the ransomware re-encrypts files using an online key, then it will be impossible to decrypt them. You may use Emsisoft Anti-Malware https://www.emsisoft.com/en/home/antimalware/#anti-ransomware Later then attach the report here. Quote Link to post Share on other sites
vindesign 0 Posted March 18, 2020 Author Report Share Posted March 18, 2020 ok Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.