CHIKKU 0 Posted April 14, 2020 Report Share Posted April 14, 2020 all my data i the system is encrypted. "Movie.mkv.mado" this is the extention is showing after all file name. so if anyone knows how to get rid from this ??? i tried EMSISOFT decryption its showing now no tools is available for it. .facebook_-1723722199.jpg.mado.crypted Quote Link to post Share on other sites
GT500 860 Posted April 15, 2020 Report Share Posted April 15, 2020 The .mado extension indicates a newer variant of the STOP/Djvu ransomware, however the file you attached to your post also has .crypted on the end of the file name, which indicates something even worse than STOP/Djvu may have encrypted your files after the STOP/Djvu ransomware encrypted them. I recommend uploading a copy of the ransom note along with an encrypted file to ID Ransomware so that you can see what that second ransomware is:https://id-ransomware.malwarehunterteam.com/ You can paste a link to the results into a reply if you would like for me to review them. Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.