Where to download STOP or DJVU Decryption Tool

[annacabrera]

My computer was infected with this virus and all the files are now converted to .djvuq extension. I believed it manages to enter the computer after installing Easeus Mobisaver. I forgot the source where I obtained the program but I am sure it just came from a freeware site. Maybe the version I downloaded was edited to include the virus code.

Situated on the same folder as .djvuq infected files is a text file containing the following messages:

—— ALL YOUR FILES ARE ENCRYPTED ——

Don’t worry, you can return all your files!
All your files documents, photos, databases and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees do we give to you?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.

Please help me find a decryption tool for this ransomware type as I need to recover all the files from my computer because I need them on my job.

Topic

[MFixer]

STOPDecrypter Tool (Download Page and Must Read…)

To this date, only one tool that can decrypt variants of STOP/DJVU ransomware and it is called STOPDecrypter. Developed by malware researcher Michael Gillespie (aka Demonslay335), this free tool will be able to decrypt files if it was encrypted using an Offline Key.

To obtain STOPDecrypter please proceed to official download page.

We highly encourage users to carefully read the first page as it contains detailed information about the Offline Keys currently embedded with the tool. If your personal ID’s on the ransom note from your infected computer is present on the listed Offline Keys from the website, it is likely possible that you can have success in recovering the files. Otherwise, the tool may not be helpful. In this case, it is recommended to backup the encrypted files and wait for possible decryption tool that may be available soon.

The tool may be able to decrypt the following STOP variants infected files if Offline Keys were used during the encryption process.

.djvu, .rumba, .promoz, .promock, .promorad, .promok, .promorad2, .kroput, . kroput1, .charck, .kropun, . doples, .luceq, .chech, .pulsar1, .proden, .drume, .tronas, .trosak, .grovas, .grovat, .raldug, .roland, .etols, .guvara, . norvas, .moresa, . verasto, .hrosas, .kiratos, .todarius, .roldat, .dutan, .sarut, .berost, .forasom, .shadow, .fordant, .codnat, .dotmap, .ferosas, .rectot, .skymap, mogera, .rezuc, .stone, .lanset, .davda, .poret, .pidon, .heroset, .muslat, .boston, . gerosan, .vesad, .horon, .neras, .truke, .dalle, .lotep, .nusar, .litar, .besub, .cezor, .lokas, .godes, .budak, .vusad, .herad, .berosuce, .gehad, .madek, .tocue, .lapoi, .todar, .dodoc, .bopador, .novasof, .darod, .access, .format.

[asep mhy]

[+] File: D:\PROGRAM\VIRUS RANSOMWARE\STOPDecrypter.zip
[-] No key for ID: St8GdXtPI5cuYm4V8DkbBrkMyFW2Lh8evqaC9ppb (.zip )

[+] File: D:\PROGRAM\VIRUS RANSOMWARE\STOPDecrypter.zip.besub
[-] No key for ID: St8GdXtPI5cuYm4V8DkbBrkMyFW2Lh8evqaC9ppb (.besub )

[+] File: D:\PROGRAM\VIRUS RANSOMWARE\uTorrent (1).exe.besub
[-] No key for ID: St8GdXtPI5cuYm4V8DkbBrkMyFW2Lh8evqaC9ppb (.besub )

Decrypted 0 files!
Skipped 3 files.

[!] No keys were found for the following IDs:
[*] ID: St8GdXtPI5cuYm4V8DkbBrkMyFW2Lh8evqaC9ppb (.zip )
[*] ID: St8GdXtPI5cuYm4V8DkbBrkMyFW2Lh8evqaC9ppb (.besub )
Please archive these IDs and the following MAC addresses in case of future decryption:
[*] MACs: D8:CB:8A:89:98:CC
This info has also been logged to STOPDecrypter-log.txt

[martha]

[!] No keys were found for the following IDs:
[*] ID: zgAtWQIpjddBUhFOZ8nGveZMZo9eu7yqlWjP9mrR (.nusar )
Please archive these IDs and the following MAC addresses in case of future decryption:
[*] MACs: 54:E1:AD:15:55:A3, 0A:00:27:00:00:07, 3E:95:09:59:46:1B, 4E:95:09:59:46:1B, 3C:95:09:59:46:1B
This info has also been logged to STOPDecrypter-log.txt
please help me to decrypt mine…
thankyou

[predro perez]

para descargar

[mr sun]

komputer saya kena virus

[wael]

Thank you so much.

[Kyaw Lwin Moe]

ATTENTION!

Don’t worry my friend, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
we.tl/t-P9I5e3nXb8
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that’s price for you is $490.
Please note that you’ll never restore your data without payment.
Check your e-mail “Spam” or “Junk” folder if you don’t get answer more than 6 hours.

To get this software you need write on our e-mail:
bufalo@firemail.cc

Reserve e-mail address to contact us:
gorentos@bitmessage.ch

Our Telegram account:
@datarestore

Your personal ID:
091hushF63iUYSFDsdf7xi0nji7Q69tNLC9IGtSGJabrGIjLGGw76byNM3pu

[Kristjan Kütt]

[+] File: C:\Users\Kütt\Desktop\aap\DSC_0026.JPG.litar
[-] No key for ID: jxU19s1HSvNZ80jOrDtfDKlggcmtXWvDDjYJNOn7 (.litar )

Decrypted 0 files!
Skipped 1 files.

[!] No keys were found for the following IDs:
[*] ID: jxU19s1HSvNZ80jOrDtfDKlggcmtXWvDDjYJNOn7 (.litar )
Please archive these IDs and the following MAC addresses in case of future decryption:
[*] MACs: AC:22:0B:74:A5:74
This info has also been logged to STOPDecrypter-log.txt

[nour]

I need stopdecrypter for the extension rezuc.

[PRAYUGO]

[+] Loaded 50 offline keys
Please archive the following info in case of future decryption:
[*] ID: fAVteWuy6mh9wLebPuy1ZftNFg09CbPdkAukiWMh
[*] ID: ppAG2IEqjVWKxLoaeeEd2ondL6Wu9aHAHA2NBrt1
[*] MACs: F0:1F:AF:1D:92:05, 3C:A9:F4:39:A7:95, 3E:A9:F4:39:A7:94, 3C:A9:F4:39:A7:94
This info has also been logged to STOPDecrypter-log.txt

[Rizwan]

[!] No keys were found for the following IDs:
[*] ID: cOw7errjOBQQIkV04sgsRIA2KP1rmznZmhD4fNi6 (.lokas )
Please archive these IDs and the following MAC addresses in case of future decryption:
[*] MACs: E0:69:95:77:FC:AF, 14:CC:20:1B:8F:FC
This info has also been logged to STOPDecrypter-log.txt
Selected directory: D:\Lali\MyProfileLinks

[leki]

Please help me with below. The file extension is not in the Decrypter.

Decrypted 0 files!
Skipped 1395 files.

[!] No keys were found for the following IDs:
[*] ID: cP9itrtXnbT8MQTu3zWYJJRVOGPG7qLWDjvxjOwp (.budak )
[*] ID: cP9itrtXnbT8MQTu3zWYJJRVOGPG7qLWDjvxjOwp (.pdf )
Please archive these IDs and the following MAC addresses in case of future decryption:
[*] MACs: 8C:EC:4B:95:3E:A9, C0:4A:00:28:A8:06, C0:4A:00:28:A8:06
This info has also been logged to STOPDecrypter-log.txt

Thank you

[Mina]

[!] No keys were found for the following IDs:
[*] ID: sLHldGNdyiqJb41llz3oofG5tn3mQdWC42jJ55zn (.jpg )
[*] ID: sLHldGNdyiqJb41llz3oofG5tn3mQdWC42jJ55zn (.lokas )
Please archive these IDs and the following MAC addresses in case of future decryption:
[*] MACs: 00:FF:F8:05:3D:A0, 68:B5:99:F6:67:10, 00:24:D7:83:8E:00, E0:2A:82:37:5C:1D
This info has also been logged to STOPDecrypter-log.txt

[xandrigors]

MACs: 14:DD:A9:4B:71:39, 12:E2:30:C5:A0:30, 40:E2:30:C5:A0:30
—————————————-
STOPDecrypter v2.1.0.15
OS Microsoft Windows NT 6.2.9200.0, .NET Framework Version 4.0.30319.42000
—————————————-

No key for ID: 2yuyuL4IYW8T0c1aYA9J9PWKyOZhqDClrUYAbNMc (.lotep )
Unidentified ID: 2yuyuL4IYW8T0c1aYA9J9PWKyOZhqDClrUYAbNMc (.lotep )
MACs: 14:DD:A9:4B:71:39, 12:E2:30:C5:A0:30, 40:E2:30:C5:A0:30
Decrypted 0 files, skipped 41

[Arkat Kurniawan]

Unidentified ID: O0x6BwzmpY6eRm8BTJ7th0tOvhpco4Behf0SHPLm
Unidentified ID: MRrOmiaGsrOBV5WeKx9PFMAoug3J1vvarRjmmut1
MACs: B0:C0:90:15:56:B6, 52:C0:90:15:56:B5, B0:C0:90:15:56:B5, F8:CA:B8:34:28:DB
—————————————-
STOPDecrypter v2.1.0.15
OS Microsoft Windows NT 6.2.9200.0, .NET Framework Version 4.0.30319.42000
—————————————-

No key for ID: O0x6BwzmpY6eRm8BTJ7th0tOvhpco4Behf0SHPLm (.cezor )
Unidentified ID: O0x6BwzmpY6eRm8BTJ7th0tOvhpco4Behf0SHPLm (.cezor )
MACs: B0:C0:90:15:56:B6, 52:C0:90:15:56:B5, B0:C0:90:15:56:B5, F8:CA:B8:34:28:DB
Decrypted 0 files, skipped 254
Unidentified ID: O0x6BwzmpY6eRm8BTJ7th0tOvhpco4Behf0SHPLm (.cezor )
MACs: B0:C0:90:15:56:B6, 52:C0:90:15:56:B5, B0:C0:90:15:56:B5, F8:CA:B8:34:28:DB
Decrypted 0 files, skipped 7
[-] Error: System.Exception: Unsupported encrypted file
at STOPDecrypter.BruteForcer.Worker_DoWork(Object sender, DoWorkEventArgs e)
at System.ComponentModel.BackgroundWorker.OnDoWork(DoWorkEventArgs e)
at System.ComponentModel.BackgroundWorker.WorkerThreadStart(Object argument)

[Author]

Replies