Recommended Posts

Hello Emsisoft team,

My PC recently got infected by .Moba ransomware and i have deleted the virus but ALL of my files being encrypted.

Is there possible way to decrypt it with decryptor tools or something else to restore my files?

*Error: Unable to decrypt file with ID: qp2fsC4LLuGAT7ke4j1JaMbzd7pTwmwXWay6661d*

please help me

Share this post


Link to post
Share on other sites
13 hours ago, sasha07 said:

Hello Emsisoft team,

My PC recently got infected by .Moba ransomware and i have deleted the virus but ALL of my files being encrypted.

Is there possible way to decrypt it with decryptor tools or something else to restore my files?

*Error: Unable to decrypt file with ID: qp2fsC4LLuGAT7ke4j1JaMbzd7pTwmwXWay6661d*

please help me

I FOUND A SOLUTION.

Sorry my english is bad.

The only thing that work for me are the following steps.

1 we must go to %temp% and delete everything in here.

2 I've download an antimalware (to delete the virus) , I dont remember the name but it's an program with a blue M.

This help a lot cause after the analyze i found 32 files with the virus. And of course I delete everything

3 after that the only problem left are the encrypted files.

Honestly I didn't find a way to desencrypt them, BUT lucky me I was able to make a recovery of them.

Go to a file, delete *.moba* in the name,after that. Right click / properties/ latest version. 

And if u have a little bit o luck it might be a point in the past. 

My example. Today is 26/06 .My file can go back to 9/06.

So, i restore every file with this... NOT EVERYTHING, but worst is nothing.

Sorry again my English is terrible, I hope i really help someone

Share this post


Link to post
Share on other sites
1 hour ago, sasha07 said:

Go to a file, delete *.moba* in the name,after that. Right click / properties/ latest version. 

Usually that doesn't work, as most ransomwares will delete shadow copies (which is where old versions of files are stored).

Note that there is more information at the following link, including a way to recover some video files:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.