Sign in to follow this  
Enoch

Yesterday my files were encripted in .vawe format

Recommended Posts

This is my id: 0235yiuduy6S5dj9BKbn37NhEkGO48hyIcAZJXvBIEZrvzXG1yyPt1
It seems to be an offline key

Is there anything that can be done?. extension is ".vawe"

Share this post


Link to post
Share on other sites
2 hours ago, Enoch said:

This is my id: 0235yiuduy6S5dj9BKbn37NhEkGO48hyIcAZJXvBIEZrvzXG1yyPt1
It seems to be an offline key

Is there anything that can be done?. extension is ".vawe"

Run the Emsisoft decrypter NOW.

  • Thanks 1

Share this post


Link to post
Share on other sites

I got infected with Stop DJVU ransomware with online key and extension .vawe yesterday. Is it wise to save my encrypted files to a usb and re-install windows and wait for the decryption? or the decryption process will get affected after formatting and installation of new windows. 

Share this post


Link to post
Share on other sites
On 6/21/2020 at 4:12 PM, Danish said:

Is it wise to save my encrypted files to a usb and re-install windows and wait for the decryption?

That's perfectly fine. Everything the decrypter needs to know about your encrypted files was added to the files themselves by the ransomware.

Share this post


Link to post
Share on other sites
On 6/21/2020 at 7:53 AM, cybermetric said:

Run the Emsisoft decrypter NOW.

It seems to be identified as an online key. so decryption is impossible :c I still used the decryption tool so i will wait until i get an answer.

Share this post


Link to post
Share on other sites
11 minutes ago, Enoch said:

It seems to be identified as an online key. so decryption is impossible :c I still used the decryption tool so i will wait until i get an answer.

Well, the ID you posted is the offline ID for this variant, and Emsisoft has recovered the offline/private key for .vawe.

So, if you ran the decrypter on all of your files and none were decrypted, (you got the 'decryption is impossible' message), all were encrypted by an online key, and the decrypter cannot help you. 

Share this post


Link to post
Share on other sites
13 hours ago, Enoch said:

It seems to be identified as an online key. so decryption is impossible :c I still used the decryption tool so i will wait until i get an answer.

Could you copy the output from the decrypter and paste it here?

Share this post


Link to post
Share on other sites

Tengo el mismo problema aun cuando tenia una copia. Es mejor formateo de dos unidas del disco duro C: y D: para evitar futuras infecciones

Share this post


Link to post
Share on other sites
8 hours ago, LKucas said:

Tengo el mismo problema aun cuando tenia una copia. Es mejor formateo de dos unidas del disco duro 😄 y 😧 para evitar futuras infecciones

Formatting your drives won't prevent future infections, however you may feel free to do so if you would like to.

Traducción proporcionada por Google:
Formatear sus unidades no evitará futuras infecciones, sin embargo, puede hacerlo si lo desea.

Share this post


Link to post
Share on other sites

Error: No key for New Variant online ID: qXA8HTyDeTSG09SDa80s6yvfp2ychK0FdscaU3YC
Notice: this ID appears to be an online ID, decryption is impossible

Help me:  ext  .vawe

Share this post


Link to post
Share on other sites
19 hours ago, Marcela said:

No key for New Variant online ID: qXA8HTyDeTSG09SDa80s6yvfp2ychK0FdscaU3YC
Notice: this ID appears to be an online ID, decryption is impossible

This is a newer variant of STOP/Djvu, and your ID is an online ID, so there is currently no way to decrypt your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.