CHIKKU 0 Report post Posted April 14 all my data i the system is encrypted. "Movie.mkv.mado" this is the extention is showing after all file name. so if anyone knows how to get rid from this ??? i tried EMSISOFT decryption its showing now no tools is available for it. .facebook_-1723722199.jpg.mado.crypted Quote Share this post Link to post Share on other sites
GT500 834 Report post Posted April 15 The .mado extension indicates a newer variant of the STOP/Djvu ransomware, however the file you attached to your post also has .crypted on the end of the file name, which indicates something even worse than STOP/Djvu may have encrypted your files after the STOP/Djvu ransomware encrypted them. I recommend uploading a copy of the ransom note along with an encrypted file to ID Ransomware so that you can see what that second ransomware is:https://id-ransomware.malwarehunterteam.com/ You can paste a link to the results into a reply if you would like for me to review them. Quote Share this post Link to post Share on other sites
