Where to download STOP or DJVU Decryption Tool

Discussion Forums Adware, Malware, and Virus Problems Where to download STOP or DJVU Decryption Tool

This topic contains 38 replies, has 1 voice, and was last updated by Avatar Do KEOSEELAVONG 1 month, 2 weeks ago.

  • Creator
    Topic
  • #1367 Reply
    Avatar
    annacabrera

    My computer was infected with this virus and all the files are now converted to .djvuq extension. I believed it manages to enter the computer after installing Easeus Mobisaver. I forgot the source where I obtained the program but I am sure it just came from a freeware site. Maybe the version I downloaded was edited to include the virus code.

    Situated on the same folder as .djvuq infected files is a text file containing the following messages:

    —— ALL YOUR FILES ARE ENCRYPTED ——

    Don’t worry, you can return all your files!
    All your files documents, photos, databases and other important are encrypted with strongest encryption and unique key.
    The only method of recovering files is to purchase decrypt tool and unique key for you.
    This software will decrypt all your encrypted files.
    What guarantees do we give to you?
    You can send one of your encrypted file from your PC and we decrypt it for free.
    But we can decrypt only 1 file for free. File must not contain valuable information.

    Please help me find a decryption tool for this ransomware type as I need to recover all the files from my computer because I need them on my job.

Viewing 15 replies - 1 through 15 (of 38 total)
  • Author
    Replies
  • #1370 Reply
    MFixer
    MFixer

    STOPDecrypter Tool (Download Page and Must Read…)

    To this date, only one tool that can decrypt variants of STOP/DJVU ransomware and it is called STOPDecrypter. Developed by malware researcher Michael Gillespie (aka Demonslay335), this free tool will be able to decrypt files if it was encrypted using an Offline Key.

    To obtain STOPDecrypter please proceed to official download page.

    We highly encourage users to carefully read the first page as it contains detailed information about the Offline Keys currently embedded with the tool. If your personal ID’s on the ransom note from your infected computer is present on the listed Offline Keys from the website, it is likely possible that you can have success in recovering the files. Otherwise, the tool may not be helpful. In this case, it is recommended to backup the encrypted files and wait for possible decryption tool that may be available soon.

    The tool may be able to decrypt the following STOP variants infected files if Offline Keys were used during the encryption process.

    .djvu, .rumba, .promoz, .promock, .promorad, .promok, .promorad2, .kroput, . kroput1, .charck, .kropun, . doples, .luceq, .chech, .pulsar1, .proden, .drume, .tronas, .trosak, .grovas, .grovat, .raldug, .roland, .etols, .guvara, . norvas, .moresa, . verasto, .hrosas, .kiratos, .todarius, .roldat, .dutan, .sarut, .berost, .forasom, .shadow, .fordant, .codnat, .dotmap, .ferosas, .rectot, .skymap, mogera, .rezuc, .stone, .lanset, .davda, .poret, .pidon, .heroset, .muslat, .boston, . gerosan, .vesad, .horon, .neras, .truke, .dalle, .lotep, .nusar, .litar, .besub, .cezor, .lokas, .godes, .budak, .vusad, .herad, .berosuce, .gehad, .madek, .tocue, .lapoi, .todar, .dodoc, .bopador, .novasof, .darod, .access, .format.

    #1397 Reply
    Avatar
    asep mhy

    [+] File: D:\PROGRAM\VIRUS RANSOMWARE\STOPDecrypter.zip
    [-] No key for ID: St8GdXtPI5cuYm4V8DkbBrkMyFW2Lh8evqaC9ppb (.zip )

    [+] File: D:\PROGRAM\VIRUS RANSOMWARE\STOPDecrypter.zip.besub
    [-] No key for ID: St8GdXtPI5cuYm4V8DkbBrkMyFW2Lh8evqaC9ppb (.besub )

    [+] File: D:\PROGRAM\VIRUS RANSOMWARE\uTorrent (1).exe.besub
    [-] No key for ID: St8GdXtPI5cuYm4V8DkbBrkMyFW2Lh8evqaC9ppb (.besub )

    Decrypted 0 files!
    Skipped 3 files.

    [!] No keys were found for the following IDs:
    [*] ID: St8GdXtPI5cuYm4V8DkbBrkMyFW2Lh8evqaC9ppb (.zip )
    [*] ID: St8GdXtPI5cuYm4V8DkbBrkMyFW2Lh8evqaC9ppb (.besub )
    Please archive these IDs and the following MAC addresses in case of future decryption:
    [*] MACs: D8:CB:8A:89:98:CC
    This info has also been logged to STOPDecrypter-log.txt

    #1396 Reply
    Avatar
    martha

    [!] No keys were found for the following IDs:
    [*] ID: zgAtWQIpjddBUhFOZ8nGveZMZo9eu7yqlWjP9mrR (.nusar )
    Please archive these IDs and the following MAC addresses in case of future decryption:
    [*] MACs: 54:E1:AD:15:55:A3, 0A:00:27:00:00:07, 3E:95:09:59:46:1B, 4E:95:09:59:46:1B, 3C:95:09:59:46:1B
    This info has also been logged to STOPDecrypter-log.txt
    please help me to decrypt mine…
    thankyou

    #1392 Reply
    Avatar
    predro perez

    para descargar

    #1391 Reply
    Avatar
    mr sun

    komputer saya kena virus

    #1390 Reply
    Avatar
    wael

    Thank you so much.

    #1388 Reply
    Avatar
    Kyaw Lwin Moe

    ATTENTION!

    Don’t worry my friend, you can return all your files!
    All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
    The only method of recovering files is to purchase decrypt tool and unique key for you.
    This software will decrypt all your encrypted files.
    What guarantees you have?
    You can send one of your encrypted file from your PC and we decrypt it for free.
    But we can decrypt only 1 file for free. File must not contain valuable information.
    You can get and look video overview decrypt tool:
    we.tl/t-P9I5e3nXb8
    Price of private key and decrypt software is $980.
    Discount 50% available if you contact us first 72 hours, that’s price for you is $490.
    Please note that you’ll never restore your data without payment.
    Check your e-mail “Spam” or “Junk” folder if you don’t get answer more than 6 hours.

    To get this software you need write on our e-mail:
    bufalo@firemail.cc

    Reserve e-mail address to contact us:
    gorentos@bitmessage.ch

    Our Telegram account:
    @datarestore

    Your personal ID:
    091hushF63iUYSFDsdf7xi0nji7Q69tNLC9IGtSGJabrGIjLGGw76byNM3pu

    #1385 Reply
    Avatar
    Kristjan Kütt

    [+] File: C:\Users\Kütt\Desktop\aap\DSC_0026.JPG.litar
    [-] No key for ID: jxU19s1HSvNZ80jOrDtfDKlggcmtXWvDDjYJNOn7 (.litar )

    Decrypted 0 files!
    Skipped 1 files.

    [!] No keys were found for the following IDs:
    [*] ID: jxU19s1HSvNZ80jOrDtfDKlggcmtXWvDDjYJNOn7 (.litar )
    Please archive these IDs and the following MAC addresses in case of future decryption:
    [*] MACs: AC:22:0B:74:A5:74
    This info has also been logged to STOPDecrypter-log.txt

    #1384 Reply
    Avatar
    nour

    I need stopdecrypter for the extension rezuc.

    #1382 Reply
    Avatar
    PRAYUGO

    [+] Loaded 50 offline keys
    Please archive the following info in case of future decryption:
    [*] ID: fAVteWuy6mh9wLebPuy1ZftNFg09CbPdkAukiWMh
    [*] ID: ppAG2IEqjVWKxLoaeeEd2ondL6Wu9aHAHA2NBrt1
    [*] MACs: F0:1F:AF:1D:92:05, 3C:A9:F4:39:A7:95, 3E:A9:F4:39:A7:94, 3C:A9:F4:39:A7:94
    This info has also been logged to STOPDecrypter-log.txt

    #1416 Reply
    Avatar
    Rizwan

    [!] No keys were found for the following IDs:
    [*] ID: cOw7errjOBQQIkV04sgsRIA2KP1rmznZmhD4fNi6 (.lokas )
    Please archive these IDs and the following MAC addresses in case of future decryption:
    [*] MACs: E0:69:95:77:FC:AF, 14:CC:20:1B:8F:FC
    This info has also been logged to STOPDecrypter-log.txt
    Selected directory: D:\Lali\MyProfileLinks

    #1434 Reply
    Avatar
    leki

    Please help me with below. The file extension is not in the Decrypter.

    Decrypted 0 files!
    Skipped 1395 files.

    [!] No keys were found for the following IDs:
    [*] ID: cP9itrtXnbT8MQTu3zWYJJRVOGPG7qLWDjvxjOwp (.budak )
    [*] ID: cP9itrtXnbT8MQTu3zWYJJRVOGPG7qLWDjvxjOwp (.pdf )
    Please archive these IDs and the following MAC addresses in case of future decryption:
    [*] MACs: 8C:EC:4B:95:3E:A9, C0:4A:00:28:A8:06, C0:4A:00:28:A8:06
    This info has also been logged to STOPDecrypter-log.txt

    Thank you

    #1429 Reply
    Avatar
    Mina

    [!] No keys were found for the following IDs:
    [*] ID: sLHldGNdyiqJb41llz3oofG5tn3mQdWC42jJ55zn (.jpg )
    [*] ID: sLHldGNdyiqJb41llz3oofG5tn3mQdWC42jJ55zn (.lokas )
    Please archive these IDs and the following MAC addresses in case of future decryption:
    [*] MACs: 00:FF:F8:05:3D:A0, 68:B5:99:F6:67:10, 00:24:D7:83:8E:00, E0:2A:82:37:5C:1D
    This info has also been logged to STOPDecrypter-log.txt

    #1425 Reply
    Avatar
    xandrigors

    MACs: 14:DD:A9:4B:71:39, 12:E2:30:C5:A0:30, 40:E2:30:C5:A0:30
    —————————————-
    STOPDecrypter v2.1.0.15
    OS Microsoft Windows NT 6.2.9200.0, .NET Framework Version 4.0.30319.42000
    —————————————-

    No key for ID: 2yuyuL4IYW8T0c1aYA9J9PWKyOZhqDClrUYAbNMc (.lotep )
    Unidentified ID: 2yuyuL4IYW8T0c1aYA9J9PWKyOZhqDClrUYAbNMc (.lotep )
    MACs: 14:DD:A9:4B:71:39, 12:E2:30:C5:A0:30, 40:E2:30:C5:A0:30
    Decrypted 0 files, skipped 41

    #1424 Reply
    Avatar
    Arkat Kurniawan

    Unidentified ID: O0x6BwzmpY6eRm8BTJ7th0tOvhpco4Behf0SHPLm
    Unidentified ID: MRrOmiaGsrOBV5WeKx9PFMAoug3J1vvarRjmmut1
    MACs: B0:C0:90:15:56:B6, 52:C0:90:15:56:B5, B0:C0:90:15:56:B5, F8:CA:B8:34:28:DB
    —————————————-
    STOPDecrypter v2.1.0.15
    OS Microsoft Windows NT 6.2.9200.0, .NET Framework Version 4.0.30319.42000
    —————————————-

    No key for ID: O0x6BwzmpY6eRm8BTJ7th0tOvhpco4Behf0SHPLm (.cezor )
    Unidentified ID: O0x6BwzmpY6eRm8BTJ7th0tOvhpco4Behf0SHPLm (.cezor )
    MACs: B0:C0:90:15:56:B6, 52:C0:90:15:56:B5, B0:C0:90:15:56:B5, F8:CA:B8:34:28:DB
    Decrypted 0 files, skipped 254
    Unidentified ID: O0x6BwzmpY6eRm8BTJ7th0tOvhpco4Behf0SHPLm (.cezor )
    MACs: B0:C0:90:15:56:B6, 52:C0:90:15:56:B5, B0:C0:90:15:56:B5, F8:CA:B8:34:28:DB
    Decrypted 0 files, skipped 7
    [-] Error: System.Exception: Unsupported encrypted file
    at STOPDecrypter.BruteForcer.Worker_DoWork(Object sender, DoWorkEventArgs e)
    at System.ComponentModel.BackgroundWorker.OnDoWork(DoWorkEventArgs e)
    at System.ComponentModel.BackgroundWorker.WorkerThreadStart(Object argument)

Viewing 15 replies - 1 through 15 (of 38 total)
Reply To: Where to download STOP or DJVU Decryption Tool
Your information: