.opqz Ransomware detected..please help !!

[Ashish anand 0]

Hi! My files are encrypted with .opqz. Here is my personal ID: 0216OIWojlj48zmgd82h65FItjbl56ff6P5GS3sZpZ1qEEGUOW6t1

and this is an Offline key of new variant (.opqz), please provide some help in decrypting files.  😭

Also attached the Text file used for attacking. ("_readme.txt")

and some encrypted samples..

_readme.txt Colored_Tunnel-deba9b46-27d4-327d-9fd9-4f7f161fd4d9.jpg.opqz invoice.pdf.opqz FIREWALL.pptx.opqz

[GT500 765]

7 hours ago, Ashish anand said:

Here is my personal ID: 0216OIWojlj48zmgd82h65FItjbl56ff6P5GS3sZpZ1qEEGUOW6t1

This is an offline ID, however we don't yet have the private key for it. I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant.

There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

[jalal 0]

 

 

Download Image

IMG_20190415_114753_594.jpg.opqz _readme.txt

Edited April 4 by jalal

[jalal 0]

5 minutes ago, jalal said:

I have tried many cases and this error occurs every time
Invalid file pair; file encrypted by newer version of STOP Djvu
How do I know if I have an offline key or an online one?

 

 

[Mamun 0]

you can win.pdf

[GT500 765]

@jalal this is a newer variant of STOP/Djvu. Fortunately your ID is an offline ID, however we don't yet have the private key for it. I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant.

There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

 

@Mamun were your files encrypted?

[jalal 0]

You've found keys for many locked extensions, but unfortunately not for opqz extensions

[GT500 765]

13 hours ago, jalal said:

You've found keys for many locked extensions, but unfortunately not for opqz extensions

We don't find them. They're donated by victims with offline ID's who have paid the ransom. That's why we can't know when we'll receive a private key for an offline ID.