- This topic is empty.
- Topic
My computer was infected with this virus and all the files are now converted to .djvuq extension. I believed it manages to enter the computer after installing Easeus Mobisaver. I forgot the source where I obtained the program but I am sure it just came from a freeware site. Maybe the version I downloaded was edited to include the virus code.
Situated on the same folder as .djvuq infected files is a text file containing the following messages:
—— ALL YOUR FILES ARE ENCRYPTED ——
Don’t worry, you can return all your files!
All your files documents, photos, databases and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees do we give to you?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.Please help me find a decryption tool for this ransomware type as I need to recover all the files from my computer because I need them on my job.
- Replies
Unidentified ID: gL3HTjYHvMKg0YRRAW3u6gMP9HCpElnpYqTrrzAo
MACs: 68:F7:28:A2:EA:0B, AE:D1:B8:E6:C0:DF, AE:D1:B8:E6:C8:DF, AC:D1:B8:E6:C0:DF, AC:D1:B8:E6:C0:DF, AC:D1:B8:E6:C0:E0
—————————————-
STOPDecrypter v2.1.0.16
OS Microsoft Windows NT 6.2.9200.0, .NET Framework Version 4.0.30319.42000
—————————————-No key for ID: gL3HTjYHvMKg0YRRAW3u6gMP9HCpElnpYqTrrzAo (.budak )
No key for ID: gL3HTjYHvMKg0YRRAW3u6gMP9HCpElnpYqTrrzAo (.jpg )
Unidentified ID: gL3HTjYHvMKg0YRRAW3u6gMP9HCpElnpYqTrrzAo (.budak )
Unidentified ID: gL3HTjYHvMKg0YRRAW3u6gMP9HCpElnpYqTrrzAo (.jpg )
MACs: 68:F7:28:A2:EA:0B, AE:D1:B8:E6:C0:DF, AE:D1:B8:E6:C8:DF, AC:D1:B8:E6:C0:DF, AC:D1:B8:E6:C0:DF, AC:D1:B8:E6:C0:E0
Decrypted 5 files, skipped 328[+] File: C:\Users\dorba\Desktop\LOGO\MARVEL LOGO.ai.cosakos
[-] No key for ID: gcHHxnoOwYHRVl7TXkAxlhASj14vAVxvmOWun2t1 (.cosakos )[+] File: C:\Users\dorba\Desktop\LOGO\MARVEL LOGO.eps.cosakos
[-] No key for ID: gcHHxnoOwYHRVl7TXkAxlhASj14vAVxvmOWun2t1 (.cosakos )Decrypted 0 files!
Skipped 2 files.[!] No keys were found for the following IDs:
[*] ID: gcHHxnoOwYHRVl7TXkAxlhASj14vAVxvmOWun2t1 (.cosakos )
Please archive these IDs and the following MAC addresses in case of future decryption:
[*] MACs: E0:D5:5E:0D:11:BB, C2:25:E9:19:75:9E, C0:25:E9:19:75:9E, 00:AC:96:8E:D9:BC, 00:50:56:C0:00:01, 00:50:56:C0:00:08, C0:25:E9:19:75:9E
This info has also been logged to STOPDecrypter-log.txt——————————————————
Help me please
Decrypt don’t work
Unidentified ID: bvjIBILG9b5DzXMAm1LUnzBhRwl4BrwLgRADlPzw
MACs: 00:24:8C:92:0A:DF, F4:EC:38:8B:C8:BE, F4:EC:38:8B:C8:BF, F4:EC:38:8B:C8:BD, F4:EC:38:8B:C8:BC
—————————————-
STOPDecrypter v2.1.0.21
OS Microsoft Windows NT 6.2.9200.0, .NET Framework Version 4.0.30319.42000
—————————————-No key for ID: bvjIBILG9b5DzXMAm1LUnzBhRwl4BrwLgRADlPzw (.ndarod )
Unidentified ID: bvjIBILG9b5DzXMAm1LUnzBhRwl4BrwLgRADlPzw (.ndarod )
MACs: 00:24:8C:92:0A:DF, F4:EC:38:8B:C8:BE, F4:EC:38:8B:C8:BF, F4:EC:38:8B:C8:BD, F4:EC:38:8B:C8:BC
Decrypted 0 files, skipped 157I cant get my files back from gusau virus
[-] No key for ID: dxZx82Iw8a7fzbWJzkisomMNrAvaUOW09xyharpJ (.gusau )
[+] File: D:\متحدون\Wahed Mohamed\WhatsApp Image 2019-02-19 at 13.59.50.jpeg.gusau
[-] No key for ID: dxZx82Iw8a7fzbWJzkisomMNrAvaUOW09xyharpJ (.gusau )Decrypted 0 files!
Skipped 722 files.[!] No keys were found for the following IDs:
[*] ID: dxZx82Iw8a7fzbWJzkisomMNrAvaUOW09xyharpJ (.gusau )
Please archive these IDs and the following MAC addresses in case of future decryption:
[*] MACs: 02:E1:29:00:4D:0D, 00:E1:29:00:4D:0D, 00:FF:A9:7C:4E:FC
This info has also been logged to STOPDecrypter-log.txt[+] Loaded 64 offline keys
Please archive the following info in case of future decryption:
[*] ID: 9sbdJHqXJM4N6uliOFljF4lS1kQ5MipUBQqeGet1
[*] ID: zs5cVHMEIAVrk5QVxjeJFVfmkkNbpiz1U8bBM29Y
[*] MACs: F4:4D:30:97:DF:F7
This info has also been logged to STOPDecrypter-log.txt—————————————-
—————————————-Unidentified ID: 9sbdJHqXJM4N6uliOFljF4lS1kQ5MipUBQqeGet1
Unidentified ID: zs5cVHMEIAVrk5QVxjeJFVfmkkNbpiz1U8bBM29Y
MACs: F4:4D:30:97:DF:F7
—————————————-
STOPDecrypter v2.1.0.20
OS Microsoft Windows NT 6.1.7601 Service Pack 1, .NET Framework Version 4.0.30319.42000
—————————————-Your personal ID:
129nGtsgHG96DEtQOVK0VmYbkfzMtVCWKmTg0T3g91az3cUGt[+] Loaded 67 offline keys
Please archive the following info in case of future decryption:
[*] ID: gcHHxnoOwYHRVl7TXkAxlhASj14vAVxvmOWun2t1
[*] MACs: E0:D5:5E:0D:11:BB, C2:25:E9:19:75:9E, C0:25:E9:19:75:9E, 00:AC:96:8E:D9:BC, 00:50:56:C0:00:01, 00:50:56:C0:00:08, C0:25:E9:19:75:9E
This info has also been logged to STOPDecrypter-log.txt
Selected directory: C:\Users\dorba\Desktop\LOGO
Starting decryption…[+] File: C:\Users\dorba\Desktop\LOGO\MARVEL LOGO.ai.cosakos
[-] No key for ID: gcHHxnoOwYHRVl7TXkAxlhASj14vAVxvmOWun2t1 (.cosakos )[+] File: C:\Users\dorba\Desktop\LOGO\MARVEL LOGO.eps.cosakos
[-] No key for ID: gcHHxnoOwYHRVl7TXkAxlhASj14vAVxvmOWun2t1 (.cosakos )Decrypted 0 files!
Skipped 2 files.[!] No keys were found for the following IDs:
[*] ID: gcHHxnoOwYHRVl7TXkAxlhASj14vAVxvmOWun2t1 (.cosakos )
Please archive these IDs and the following MAC addresses in case of future decryption:
[*] MACs: E0:D5:5E:0D:11:BB, C2:25:E9:19:75:9E, C0:25:E9:19:75:9E, 00:AC:96:8E:D9:BC, 00:50:56:C0:00:01, 00:50:56:C0:00:08, C0:25:E9:19:75:9E
This info has also been logged to STOPDecrypter-log.txt———————————-
Help me please
can you help me ,please i want to recover all my files specially photo and video of my two child for almost 7yrs ive lost it all please help me ,,thankyou
all my files are encrypted with ndarod ransomware
STOPDecrypter v2.1.0.20
OS Microsoft Windows NT 6.2.9200.0, .NET Framework Version 4.0.30319.42000
—————————————-No key for ID: If61t1CEpy1gSe604elJrXkTQGGWwneWulro4t1b (.ndarod )
Unidentified ID: If61t1CEpy1gSe604elJrXkTQGGWwneWulro4t1b (.ndarod )
MACs: 10:78:D2:CC:56:11, 10:78:D2:D1:DA:D6, 00:1A:7D:DA:71:13
Decrypted 107 files, skipped 2037