Ashish anand

.opqz Ransomware detected..please help !!

Recommended Posts

Hi! My files are encrypted with .opqz. Here is my personal ID: 0216OIWojlj48zmgd82h65FItjbl56ff6P5GS3sZpZ1qEEGUOW6t1

and this is an Offline key of new variant (.opqz), please provide some help in decrypting files.  😭

Also attached the Text file used for attacking. ("_readme.txt")

and some encrypted samples..

_readme.txt Colored_Tunnel-deba9b46-27d4-327d-9fd9-4f7f161fd4d9.jpg.opqz invoice.pdf.opqz FIREWALL.pptx.opqz

Share this post


Link to post
Share on other sites
7 hours ago, Ashish anand said:

Here is my personal ID: 0216OIWojlj48zmgd82h65FItjbl56ff6P5GS3sZpZ1qEEGUOW6t1

This is an offline ID, however we don't yet have the private key for it. I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant.

There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Share this post


Link to post
Share on other sites
5 minutes ago, jalal said:
I have tried many cases and this error occurs every time
Invalid file pair; file encrypted by newer version of STOP Djvu
How do I know if I have an offline key or an online one?

 

 

Share this post


Link to post
Share on other sites

@jalal this is a newer variant of STOP/Djvu. Fortunately your ID is an offline ID, however we don't yet have the private key for it. I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant.

There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

 

@Mamun were your files encrypted?

  • Thanks 1

Share this post


Link to post
Share on other sites
13 hours ago, jalal said:

You've found keys for many locked extensions, but unfortunately not for opqz extensions

We don't find them. They're donated by victims with offline ID's who have paid the ransom. That's why we can't know when we'll receive a private key for an offline ID.

  • Like 1

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.