naimelhajj Hi everyone, My pc got infected with ransomware STOP djvu. Now all my files have .meds extension. Is there a way to retrieve the files without having to pay?
duke-of-bytes i can try several decryptors .. can you send me a small encrypted file .. maximum around 5 MB ?
naimelhajj duke-of-bytes wrotei can try several decryptors .. can you send me a small encrypted file .. maximum around 5 MB ? Sure! Where can I send it? I was an infected by a zip file I downloaded.
duke-of-bytes naimelhajj wroteduke-of-bytes wrotei can try several decryptors .. can you send me a small encrypted file .. maximum around 5 MB ? Sure! Where can I send it? I was an infected by a zip file I downloaded. post it to google drive and send me the link by pm
naimelhajj Turns out this particular version of STOP djvu cannot be decrypted. I was able to restore to a previous version of windows to save data on my pc, but the infected files on my external drives still have the .meds extension. Is there a way to restore previous versions of these files to a point before the infection?
potato you can use this website to test it out if its possible to decrypt no need to share the files with anyone https://id-ransomware.malwarehunterteam.com/ I'm interested to know from which website you downloaded the zip file
naimelhajj potato wroteyou can use this website to test it out if its possible to decrypt no need to share the files with anyone https://id-ransomware.malwarehunterteam.com/ I'm interested to know from which website you downloaded the zip file Yea just check it again, it's impossible to decrypt. The file I downloaded was for a site called mazterize dot com. It was a software for a 3D printer.
Kazouza naimelhajj wrote Is there a way to restore previous versions of these files to a point before the infection? I don't think you can do that unless you had it enabled in the settings. Best thing you can do is wait until this version can be decrypted.
NoReGreT Maybe this will help, https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/page-50#entry4682102