kashangb

mado virus (STOP Djvu) Please help

Recommended Posts

Hi,

On 31-march-2020, my laptop had been infected with .mado virus (its a STOP DJVU virus), all files in my pc are now encrypted. files are encrypted with offline id so decryption is possible, i have removed malwares but cant decrypt files, i am enclosing ransomware note and a encrypted file for your reference, please help me to decrypt my files.

i tried emsisoft decryptor for STOP Djvu and got this below error:


File: C:\adb\platform-tools\sqlite3.exe.mado
No key for New Variant offline ID: 8TaHEsq5r7cNJKbYdWseLEB2pW1FuZKoKjKg5tt1
Notice: this ID appears be an offline ID, decryption MAY be possible in the future

 

i found following ransomware note in every folder: 

 

ATTENTION!

Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-y7G4t6cSO4
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.


To get this software you need write on our e-mail:
[email protected]

Reserve e-mail address to contact us:
[email protected]

Your personal ID:
0217OIWojlj488TaHEsq5r7cNJKbYdWseLEB2pW1FuZKoKjKg5tt1

 

 

intro ban.jpg.mado _readme.txt

Share this post


Link to post
Share on other sites
23 hours ago, kashangb said:

Your personal ID:
0217OIWojlj488TaHEsq5r7cNJKbYdWseLEB2pW1FuZKoKjKg5tt1

This is an offline ID, however we don't yet have the private key for it. I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant.

There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

  • Like 1

Share this post


Link to post
Share on other sites
21 hours ago, GT500 said:

This is an offline ID, however we don't yet have the private key for it. I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant.

There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Thanks Sir, I will try every week and i would like to donate some money to this website for motivating your work that you doing free of cost for poor people, i have seen many people are attacked every day by ransomware, this is the first time i came into this problem before that i didnt even know what is ransomware, i have seen many people commenting on youtube  for solution, innocent people are attacked everyday. people should be aware of ransomware. Hats off for your contribution for humanity.

 

For your kind information this below website is posting ransomware attack softwares that people are downloading and getting attacked please ckeckout if this can help you in getting these crooks arrested by police.

https://masterkreatif.net/

 

Also please suggest me a good application to protect  my pc for future attack.

Edited by GT500
Removed link.

Share this post


Link to post
Share on other sites
15 hours ago, kashangb said:

Thanks Sir, I will try every week and i would like to donate some money to this website for motivating your work that you doing free of cost for poor people, i have seen many people are attacked every day by ransomware, this is the first time i came into this problem before that i didnt even know what is ransomware, i have seen many people commenting on youtube  for solution, innocent people are attacked everyday. people should be aware of ransomware. Hats off for your contribution for humanity.

We don't take donations, however we do sell products (such as Anti-Virus software) which you can find at the following link:
https://www.emsisoft.com/

The developer who made the decrypter also maintains the ID Ransomware website, and he takes donations via Patreon if anyone would like to support him:
https://www.patreon.com/demonslay335

 

16 hours ago, kashangb said:

For your kind information this below website is posting ransomware attack softwares that people are downloading and getting attacked please ckeckout if this can help you in getting these crooks arrested by police.

https://masterkreatif.net/

I've forwarded it to our malware analysts.

 

16 hours ago, kashangb said:

Also please suggest me a good application to protect  my pc for future attack.

Emsisoft Anti-Malware (our Anti-Virus software) is capable of preventing the STOP/Djvu ransomware, along with pretty much any other kind of ransomware.

Share this post


Link to post
Share on other sites
19 hours ago, kashangb said:

For your kind information this below website is posting ransomware attack softwares that people are downloading and getting attacked please ckeckout if this can help you in getting these crooks arrested by police.

https://masterkreatif.net/

One of our analysts downloaded a few files from that site, but wasn't able to find any ransomware. They did find things we'd classify as "Potentially Unwanted Programs", so the site has been classified as "PUP" in our database.

Share this post


Link to post
Share on other sites
5 hours ago, GT500 said:

One of our analysts downloaded a few files from that site, but wasn't able to find any ransomware. They did find things we'd classify as "Potentially Unwanted Programs", so the site has been classified as "PUP" in our database.

it also encrypts files after some time.

Share this post


Link to post
Share on other sites

Sir, I am deeply horrified with this act of the hackers responsible for MADO ransomware.I am already depriving of the Money and going through financial crisis.These hackers had encrypted my files and my business data is being lost.This can lead me to debt cause i have a lot of customers data and even a month delay can made my life vulnerable to huge loss.Please Sir do some help for me because it will be the biggest help for ever and for may family.I request you to please come with the dcryption  key of this.May God put these hackers in hell fire who had stolen important  data of people .God will for sure take the revenge from them.I Hope you will help me and other people life.Once again thanks and a salute to you.

Share this post


Link to post
Share on other sites
On 4/2/2020 at 12:45 PM, GT500 said:

This is an offline ID, however we don't yet have the private key for it. I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant.

There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

So the app will automatically update once the keys are released because I also have the same issue but my keys are offline and my save data is converted to .mado. I would highly appreciate that if daily updates are sent to my e-mail and when they private keys are released I would be able to restore my data.

 

Share this post


Link to post
Share on other sites
19 hours ago, kashangb said:

it also encrypts files after some time.

Some things we classify as PUP have been known to install STOP ransomware if the computers they're run on are located in certain countries. Regardless, the website is blocked for most of our customer now, and our products have always detected the STOP ransomware (it's very easy to detect).

 

19 hours ago, Sunny122 said:

Sir, I am deeply horrified with this act of the hackers responsible for MADO ransomware.I am already depriving of the Money and going through financial crisis.These hackers had encrypted my files and my business data is being lost.This can lead me to debt cause i have a lot of customers data and even a month delay can made my life vulnerable to huge loss.Please Sir do some help for me because it will be the biggest help for ever and for may family.I request you to please come with the dcryption  key of this.May God put these hackers in hell fire who had stolen important  data of people .God will for sure take the revenge from them.I Hope you will help me and other people life.Once again thanks and a salute to you.

This is a newer variant of STOP/Djvu. If you have an offline ID, then once we can find the decryption key for this variant and add it to our database you should be able to recover your files. However, if you have an online ID (which is more likely) then it will not be possible to recover your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

 

7 hours ago, Khawaja Ahmad said:

So the app will automatically update once the keys are released because I also have the same issue but my keys are offline and my save data is converted to .mado. I would highly appreciate that if daily updates are sent to my e-mail and when they private keys are released I would be able to restore my data.

The decrypter sends your ID to our servers, which reply with information on whether or not we have the key for it. If we do, the key is sent to allow decryption. No updates to the decrypter are necessary.

 

7 minutes ago, VladDombici said:

Hi! I have the same problem. 
my id: 02170Wojlj485mmuigoBnsRYRQTjwR3FvN8K4g1lxWQAYIex55bE

This is a newer variant of STOP/Djvu, and your ID is an online ID, so there is currently no way to decrypt your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

  • Like 1

Share this post


Link to post
Share on other sites

Sir my personal ID is..Can i recover my files???? And Sir please tell me that how much time will u you take for the making of encrption tool.
0217OIWojlj48DGonEyXf1EqBakZ2bOad3H41BJDrncpKASbNh9Y3

Share this post


Link to post
Share on other sites

Hello, my personal ID is : 
0217OIWojlj488TaHEsq5r7cNJKbYdWseLEB2pW1FuZKoKjKg5tt1
I want to know how much time it will take to create your program for encrypting my files. And i want to ask you, this program will be paid?

Thank you

Share this post


Link to post
Share on other sites

hi, i am very sad because all my data in my pc have been encrypted , any files name ends with .mado.

i have already removed the malware but i need your assistant to recover my data. please inform me about .

 

Your personal ID:
0217OIWojlj488TaHEsq5r7cNJKbYdWseLEB2pW1FuZKoKjKg5tt1

Edited by pkiakis
add my personal ID

Share this post


Link to post
Share on other sites
1 hour ago, tuandung2612 said:

 

I have same issue on 4 april 2020 9AM

 all file extensions appearing .mado

personal ID is  0217OIWojlj48aFDVNo06LHWOy2Fn83KknMPdWJd71XlEdEQm4ZIO

please help me 

I think so, this was happen due to keygen used for Adobe pro v15  or may be due to

When I install wireshark 9am on my pc & restart, all files extension appears .mado

 

Share this post


Link to post
Share on other sites

Hi! I have the same problem. 

all files encrypted with .mado extension
my id: 0217OIWojlj488TaHEsq5r7cNJKbYdWseLEB2pW1FuZKoKjKg5tt1

please help.

thanks!

Share this post


Link to post
Share on other sites

I have also same problem

_readme.txt file content

ATTENTION!

Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-PHJh5SU4jT
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.


To get this software you need write on our e-mail:
[email protected]

Reserve e-mail address to contact us:
[email protected]

Your personal ID:
0217OIWojlj488TaHEsq5r7cNJKbYdWseLEB2pW1FuZKoKjKg5tt1

Share this post


Link to post
Share on other sites

ID: 6ME2cIAgrHOcubYDHlKMAP0nkP5pRHvdhLhtddR3

Please help me with this, all my files has changed to extension .MADO and while decryption it shows that the above mentioned ID and shows impossible. 

Share this post


Link to post
Share on other sites

@Sunny122, @Ashish_G, and @Apurva Agarwal this is a newer variant of STOP/Djvu, and your ID's are online ID's, so there is currently no way to decrypt your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

 

@Gofra, @pkiakis, @tuandung2612, @deepak_, @Pravin Gosavi, and @krishnamaithreya this is a newer variant of STOP/Djvu. Fortunately your ID's are offline ID's, however we don't yet have the private key for it. I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant.

There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Share this post


Link to post
Share on other sites

ATTENTION!

Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-PHJh5SU4jT
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.


To get this software you need write on our e-mail:
[email protected]

Reserve e-mail address to contact us:
[email protected]

Your personal ID:
0217OIWojlj48vAmoyCyRa0PKs8B0h5il0c2PBosOGh44riVS3t7q

Share this post


Link to post
Share on other sites
On 4/4/2020 at 1:28 PM, GT500 said:

Some things we classify as PUP have been known to install STOP ransomware if the computers they're run on are located in certain countries. Regardless, the website is blocked for most of our customer now, and our products have always detected the STOP ransomware (it's very easy to detect).

 

This is a newer variant of STOP/Djvu. If you have an offline ID, then once we can find the decryption key for this variant and add it to our database you should be able to recover your files. However, if you have an online ID (which is more likely) then it will not be possible to recover your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

 

The decrypter sends your ID to our servers, which reply with information on whether or not we have the key for it. If we do, the key is sent to allow decryption. No updates to the decrypter are necessary.

 

This is a newer variant of STOP/Djvu, and your ID is an online ID, so there is currently no way to decrypt your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

hi, do you think that it’s ok to send them 2-3 files that I need as urgency to decrypt?

Thanks!

Share this post


Link to post
Share on other sites

MY laptop is attacked with the same id ... 8000 files in my laptop are changed with addeded .mado extension ( e.g.   a.jpg is changed to a.jpg.mado )

when i ran Emsisoft decrytor it gives me following messages

"File: C:\Black Photo\Facebook\Maandya\IMG_4582.JPG.mado
No key for New Variant offline ID: 8TaHEsq5r7cNJKbYdWseLEB2pW1FuZKoKjKg5tt1
Notice: this ID appears be an offline ID, decryption MAY be possible in the future..."

pls help 
 

 

_readme.txt Risk analysis.pdf.mado

Share this post


Link to post
Share on other sites

My laptop also attacked by .MADO, the ID's are offline ID's,  and also wait for a key to fix them.

Please help me...please develop the private key for it. 

Share this post


Link to post
Share on other sites

@adityagede99, @Chinnhoo Computer, and @Kotari koteswararao this is a newer variant of STOP/Djvu, and your ID's are online ID's, so there is currently no way to decrypt your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

 

@Surasri this is a newer variant of STOP/Djvu. Fortunately your ID is an offline ID, however we don't yet have the private key for it. I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

 

@Nouman this is a newer variant of STOP/Djvu. If you have an offline ID, then once we can find the decryption key for this variant and add it to our database you should be able to recover your files. However, if you have an online ID (which is more likely) then it will not be possible to recover your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

 

21 hours ago, princejec said:

How do I decrypt offline encryption?

I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant.

 

21 hours ago, princejec said:

Does it affect only one drive or targets other drives too?

The STOP/Djvu ransomware will encrypt files on any drive connected to your computer.

 

3 hours ago, princejec said:

Do we need to be online while using the decryption tool? 

Yes. It requires a connection to our servers to function.

 

6 minutes ago, Jaruayporn said:

Please help me...please develop the private key for it. 

We don't "develop" private keys. Those are created by the servers operated by the criminals. With offline ID's, since everyone's files who have offline ID's for the same variant of STOP/Djvu have been encrypted with the same public key, their files can all be decrypted with the same private key. We get those private keys when someone who has an offline ID pays the ransom and donates the decrypter the criminals sent them to us so that we can extract the private key from it. This process takes time, as it relies on the generosity of victims who have enough money and don't mind paying the ransom in order to make a donation like that.

  • Like 2

Share this post


Link to post
Share on other sites
27 minutes ago, GT500 said:

We don't "develop" private keys. Those are created by the servers operated by the criminals. With offline ID's, since everyone's files who have offline ID's for the same variant of STOP/Djvu have been encrypted with the same public key, their files can all be decrypted with the same private key. We get those private keys when someone who has an offline ID pays the ransom and donates the decrypter the criminals sent them to us so that we can extract the private key from it. This process takes time, as it relies on the generosity of victims who have enough money and don't mind paying the ransom in order to make a donation like that.

I see... Thank you so much for explanation.

Share this post


Link to post
Share on other sites

Has anyone's Mado offline encrypted files been decrypted yet? If yes, then there is a hope for others. How does this threat compare to earlier ransomewares? 

Share this post


Link to post
Share on other sites

Hello all, my files have been encrypted too. I managed to recover big .ost files via outlook, maybe if you have big files you can recover them too.

When opened in text editor every file have this 1TNDrPImqMGs9RIKNTs88gmbUr9b6UTDacgPoTzd{36A698B9-D67C-4E07-BE82-0EC5B14B4DF5} in the end..

My id: 0217OIWojlj481TNDrPImqMGs9RIKNTs88gmbUr9b6UTDacgPoTzd

Share this post


Link to post
Share on other sites

Hi, 

A relative of mine got the MADO ransomware, he is using a winows 7 machine and every time we try run emsisoft, it freezes after some time saying not responding. The ransom note is attached as a picture. Kindly help me know if its the newer version which cant be decrypted because its an online key? Or should it be working? IMG-20200408-WA0002.thumb.jpg.dd95825c6757995ec001f84ec6a8b392.jpg
Download Image

Share this post


Link to post
Share on other sites
50 minutes ago, Quey said:

My id: 0217OIWojlj481TNDrPImqMGs9RIKNTs88gmbUr9b6UTDacgPoTzd

Assuming your file names all end in .mado this is a newer variant of STOP/Djvu, and your ID is an online ID, so there is currently no way to decrypt your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

 

29 minutes ago, SimiK said:

A relative of mine got the MADO ransomware, he is using a winows 7 machine and every time we try run emsisoft, it freezes after some time saying not responding. The ransom note is attached as a picture. Kindly help me know if its the newer version which cant be decrypted because its an online key? Or should it be working

This is a newer variant of STOP/Djvu. Fortunately your ID is an offline ID, however we don't yet have the private key for it. I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant.

There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

As for the decrypter freezing, when is it happening? Does it happen when the decrypter says "Starting" at the bottom?

Share this post


Link to post
Share on other sites
6 hours ago, GT500 said:

Assuming your file names all end in .mado this is a newer variant of STOP/Djvu, and your ID is an online ID, so there is currently no way to decrypt your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

 

This is a newer variant of STOP/Djvu. Fortunately your ID is an offline ID, however we don't yet have the private key for it. I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant.

There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

As for the decrypter freezing, when is it happening? Does it happen when the decrypter says "Starting" at the bottom?

Thank you for your response. We will run the decrypter every week and hopefully the private key will be added soon. I told him to download the latest .Net framework and that seemed to fix the decrypter freezing. 

Share this post


Link to post
Share on other sites
15 hours ago, SimiK said:

I told him to download the latest .Net framework and that seemed to fix the decrypter freezing. 

I'm glad to hear the issue was easy to fix. Hopefully we'll be able to get a private key for this variant's offline ID soon.

Share this post


Link to post
Share on other sites

hello good sir, recently my laptop got infected with mado

here is my personal id: 0217OIWojlj48zHHO0IJq5MgQE1oz9Z8wQePhINsv7KbqDKijU4yt
is it possible to decrypt? i'm very desperate because all my marriage photos, all my child videos got turned into mado file
please help me sir, i beg you

Share this post


Link to post
Share on other sites
14 hours ago, wawaww said:

here is my personal id: 0217OIWojlj48zHHO0IJq5MgQE1oz9Z8wQePhINsv7KbqDKijU4yt
is it possible to decrypt? i'm very desperate because all my marriage photos, all my child videos got turned into mado file

This is a newer variant of STOP/Djvu, and your ID is an online ID, so there is currently no way to decrypt your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Share this post


Link to post
Share on other sites

Your personal ID:
0217OIWojlj48yqXEyZhUNIG115Ajnl4mmf2PYRxEnecO2bmUB39H

is this a online id?

 if its an ofline id is there any keys for it. i have very important company files on this computer.

please im very desperate. 

 

Share this post


Link to post
Share on other sites

Dear Sir,

 

I have many troubles with Mado virus, I used Emsisoft Decryptor But I Recieved the result as below: 

No key for New Variant offline ID: 8TaHEsq5r7cNJKbYdWseLEB2pW1FuZKoKjKg5tt1
Notice: this ID appears be an offline ID, decryption MAY be possible in the future

File: D:\Show room\Vafaco\DANH MUC HINH 2018.xlsx.mado
No key for New Variant offline ID: 8TaHEsq5r7cNJKbYdWseLEB2pW1FuZKoKjKg5tt1
Notice: this ID appears be an offline ID, decryption MAY be possible in the future

File: D:\Show room\Vafaco\Kho thanh pham ( KH ).xlsx.mado
No key for New Variant online ID: IOh2ZIfLMciR3qhNOLvoCuVthU5bjF5MvczpyGYA
Notice: this ID appears to be an online ID, decryption is impossible

File: D:\Show room\Vafaco\~$DANH MUC HINH 2018.xlsx.mado
No key for New Variant offline ID: 8TaHEsq5r7cNJKbYdWseLEB2pW1FuZKoKjKg5tt1
Notice: this ID appears be an offline ID, decryption MAY be possible in the future

File: D:\Show room\X8\21462887_661993890669931_1196110386016829976_n.jpg.mado
No key for New Variant offline ID: 8TaHEsq5r7cNJKbYdWseLEB2pW1FuZKoKjKg5tt1
Notice: this ID appears be an offline ID, decryption MAY be possible in the future

File: D:\Show room\X8\21463231_786221334870835_690571018179341247_n.jpg.mado
No key for New Variant offline ID: 8TaHEsq5r7cNJKbYdWseLEB2pW1FuZKoKjKg5tt1
Notice: this ID appears be an offline ID, decryption MAY be possible in the future

File: D:\Show room\X8\21685919_1247266248710823_943630509302060381_n.jpg.mado
No key for New Variant online ID: IOh2ZIfLMciR3qhNOLvoCuVthU5bjF5MvczpyGYA
Notice: this ID appears to be an online ID, decryption is impossible

Finished!

I have tried many times to recover my files but the result was same as above, please help to show how to recover my files.

 

Thanks for your strong support.

Best regards

Nam 

Share this post


Link to post
Share on other sites
18 hours ago, seannnnn said:

Your personal ID:
0217OIWojlj48yqXEyZhUNIG115Ajnl4mmf2PYRxEnecO2bmUB39H

is this a online id?

Yes, it's an online ID.

Share this post


Link to post
Share on other sites
33 minutes ago, Nam said:

No key for New Variant offline ID: 8TaHEsq5r7cNJKbYdWseLEB2pW1FuZKoKjKg5tt1
Notice: this ID appears be an offline ID, decryption MAY be possible in the future

This is a newer variant of STOP/Djvu. Fortunately your ID is an offline ID, however we don't yet have the private key for it. I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant.

There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Share this post


Link to post
Share on other sites
22 minutes ago, GT500 said:

This is a newer variant of STOP/Djvu. Fortunately your ID is an offline ID, however we don't yet have the private key for it. I recommend running the decrypter once every week or two so that you can see when we've been able to add the private key for your variant.

There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Dear Sir.

Here is the email from hacker.

TTENTION!

Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-PHJh5SU4jT
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.


To get this software you need write on our e-mail:
[email protected]

Reserve e-mail address to contact us:
[email protected]

Your personal ID:
0217OIWojlj48IOh2ZIfLMciR3qhNOLvoCuVthU5bjF5MvczpyGYA

Best regards

Nam

Share this post


Link to post
Share on other sites

Same problem here since march 30, still havent recovery from this, nor my files, nor my mental health, my job, my life was on those files.

How can i know if this was online or offline and can anybody give me hopes, please?

ATTENTION!

Don't worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-PHJh5SU4jT
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that's price for you is $490.
Please note that you'll never restore your data without payment.
Check your e-mail "Spam" or "Junk" folder if you don't get answer more than 6 hours.


To get this software you need write on our e-mail:
[email protected]

Reserve e-mail address to contact us:
[email protected]

Your personal ID:
0217OIWojlj4847OTgKi9Rc8OibfzHh3bCPTLFCUFsi300UWOFnKA

Share this post


Link to post
Share on other sites
23 hours ago, Nam said:

Your personal ID:
0217OIWojlj48IOh2ZIfLMciR3qhNOLvoCuVthU5bjF5MvczpyGYA

This is an online ID. This means some of your files won't be recoverable.

  • Like 1

Share this post


Link to post
Share on other sites
1 hour ago, rolequ said:

Your personal ID:
0217OIWojlj4847OTgKi9Rc8OibfzHh3bCPTLFCUFsi300UWOFnKA

This is a newer variant of STOP/Djvu, and your ID is an online ID, so there is currently no way to decrypt your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

  • Like 1

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.