Sign in to follow this  
alansuccess

Alan S.

Recommended Posts

Hi, 

I realised I've been infected by this .sglh ransomware virus since this morning.

I have tried your tools but unfortunately it has been impossible to decrypt my files - which now have an extension of .sglh.

 

Share this post


Link to post
Share on other sites

This is a newer variant of STOP/Djvu. If you have an offline ID, then once we can find the decryption key for this variant and add it to our database you should be able to recover your files. However, if you have an online ID (which is more likely) then it will not be possible to recover your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

 

Share this post


Link to post
Share on other sites

Here are the files, a text file left by the attacker, and the files from the scan EEK and Farber Recovery Scan.

Text below is from the ransomware text

To get this software you need write on our e-mail:
[email protected]

Reserve e-mail address to contact us:
[email protected]

Your personal ID:
0266OrjkVLZHgtLrTGp3rAIm84CHHmUTVhUEqtd5lcjxmAfa

Kindly advice, I really need to decrypt my data.

_readme.txt Addition.txt FRST.txt scan_201119-160516.txt

Share this post


Link to post
Share on other sites
On 11/20/2020 at 3:03 AM, alansuccess said:

Your personal ID:
0266OrjkVLZHgtLrTGp3rAIm84CHHmUTVhUEqtd5lcjxmAfa

This is an online ID.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

Sign in to follow this  

  • Recently Browsing   0 members

    No registered users viewing this page.