Jump to content

New variant of .igal rasomware


Recommended Posts

This has happened on 25th of December. decrypt_STOPDjvu is unable to decrypt the files. I'm attaching some samples for your kind consideration. please, hep me. I have some very important docs to decrypt.

AdmitCard_KQRXRDZECP.pdf.igal Executive Officer-Cas-probashi kollan bank.pdf.igal mosjid committee - 2.docx.igal NW1(10th Bill).xlsx.igal 300x300.jpg.igal img011.jpg.igal Facebook_2.mp4.igal Refat Sultana Jahan.pptx.igal

Link to post
Share on other sites

I have the same issue i re-installed window and tried to use decryptor for STOP Djvu but it didn't work showing message like: 

File: E:\edit1.jpg.igal
Error: No key for New Variant online ID: 7IgDCumry5g8wP7WvphE26FJFME7i0L7DoGGZq5H
Notice: this ID appears to be an online ID, decryption is impossible
 

this i got please help us!

Link to post
Share on other sites
On 12/28/2020 at 12:10 AM, Kamrul said:

This has happened on 25th of December. decrypt_STOPDjvu is unable to decrypt the files. I'm attaching some samples for your kind consideration. please, hep me. I have some very important docs to decrypt.

This is a newer variant of STOP/Djvu. If you have an offline ID, then once we can find the decryption key for this variant and add it to our database you should be able to recover your files. However, if you have an online ID (which is more likely) then it will not be possible to recover your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Link to post
Share on other sites
13 hours ago, Moeez Ahmad said:

No key for New Variant online ID: 7IgDCumry5g8wP7WvphE26FJFME7i0L7DoGGZq5H
Notice: this ID appears to be an online ID, decryption is impossible

This is a newer variant of STOP/Djvu, and your ID is an online ID, so there is currently no way to decrypt your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Link to post
Share on other sites
4 hours ago, Hiroshi9 said:

My pc got infected with same virus but it is an offline variant. I will wait for emisoft to come up with a decryptor. It will be very helpful if emisoft admins send email when they get the RSA key to igal

We already have a decrypter. We just need a victim who has the offline ID and has paid the ransom to donate the private key so that we can add it to our database. I recommend running the decrypter once every week or two so that you can see when we've had a chance to add the private key for this variant's offline ID.

There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

Link to post
Share on other sites
  • 3 weeks later...
On 12/29/2020 at 8:52 AM, GT500 said:

We already have a decrypter. We just need a victim who has the offline ID and has paid the ransom to donate the private key so that we can add it to our database. I recommend running the decrypter once every week or two so that you can see when we've had a chance to add the private key for this variant's offline ID.

There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

First thanks for your helpings. My files decrypted offline. And my file extentions transformed to .igal  When we can able to recover our files? Is there any "decrypt_STOPDjvu" update for .igal extentions? I'll be happy if you answer me.

Thanks for helps.

Link to post
Share on other sites
20 hours ago, Enver Esad said:

First thanks for your helpings. My files decrypted offline. And my file extentions transformed to .igal  When we can able to recover our files? Is there any "decrypt_STOPDjvu" update for .igal extentions? I'll be happy if you answer me.

Thanks for helps.

This is a newer variant of STOP/Djvu. If you have an offline ID, then once we can find the decryption key for this variant and add it to our database you should be able to recover your files. However, if you have an online ID (which is more likely) then it will not be possible to recover your files. There is more information at the following link:
https://support.emsisoft.com/topic/32045-about-the-stopdjvu-decrypter/

  • Upvote 1
Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...