STOP Djvu Ransomware Encryption and Decryption

Am I infected by STOP (Djvu) Ransomware?

The STOP ransomware family, also denominated the STOP Djvu Ransomware family, is a threatening piece of malware.

The STOP Djvu is just one of the multiple threats that share common characteristics and originate from the STOP ransomware, even though some of their methods to affect file types and encrypt file extensions differ.

You can identify if you are infected by STOP (djvu) ransomware if you can see a text like this in the Ransomware notes:

Upon a successful computer infiltration, the STOP/DJVU virus scans the system for personal files and encrypts them with multiple cryptographic algorithms, so that the victims couldn’t access them anymore.

Consequently, the malware drops ransom notes (called _openme.txt or _readme.txt), which hold information regarding data decryption.

STOP Ransomware Ransom Note Files

STOP Ransomware will leave files (ransom notes) named:

• !!!YourDataRestore!!!.txt
• !!!RestoreProcess!!!.txt
• !!!INFO_RESTORE!!!.txt
• !!RESTORE!!!.txt
• !!!!RESTORE_FILES!!!.txt
• !!!DATA_RESTORE!!!.txt
• !!!RESTORE_DATA!!!.txt
• !!!KEYPASS_DECRYPTION_INFO!!!.txt
• !!!WHY_MY_FILES_NOT_OPEN!!!.txt
• !!!SAVE_FILES_INFO!!!.txt
• !readme.txt
• _openme.txt
•  _open_.txt
• _readme.txt

The STOP Ransomware Note

Usually the ransomware note will look similar to this text

ATTENTION!

Don’t worry, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
https://we.tl/t-o7ClqIH7RS
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that’s price for you is $490.
Please note that you’ll never restore your data without payment.
Check your e-mail “Spam” or “Junk” folder if you don’t get answer more than 6 hours.

To get this software you need write on our e-mail:
gorentos@bitmessage.ch

Reserve e-mail address to contact us:
gorentos2@firemail.cc

Our Telegram account:
@datarestore
Mark Data Restore

Your personal ID:

STOP Ransomware extentions list

Your files that are encrypted by STOP Ransomware will have probably one of the following extentions. But this ransomware always changed extentions.

• .verasto
• .hrosas
• .kiratos
• .todarius
• .hofos
• .roldat
• .dutan
• .sarut
• .fedasot
• .forasom
• .berost
• .fordan
• .codnat
• .codnat1
• .bufas
• .dotmap
• .radman
• .ferosas
• .rectot
• .skymap
• .mogera
• .rezuc
• .stone
• .redmat
• .lanset
• .davda
• .poret
• .pidon
• .heroset
• .myskle
• .boston
• .muslat
• .gerosan
• .vesad
• .horon
• .neras
• .truke
• .dalle
• .lotep
• .nusar
• .litar
• .besub
• .cezor
• .lokas
• .godes
• .budak
• .vusad
• .herad
• .berosuce
• .gehad
• .gusau
• .madek
• .tocue
• .darus
• .lapoi
• .todar
• .dodoc
• .bopador
• .novasof
• .ntuseg
• .ndarod
• .access
• .format
• .nelasod
• .mogranos
• .cosakos
• .nvetud
• .lotej
• .kovasoh
• .prandel
• .zatrov
• .masok
• .brusaf
• .londec
• .krusop
• .mtogas
• .coharos
• .nasoh
• .nacro
• .pedro
• .nuksus
• .vesrato
• .masodas
• .stare
• .cetori
• .carote
• .shariz
• .gero
• .hese
• .geno
• .xoza
• .seto
• .peta
• .moka
• .meds
• .kvag
• .domn
• .karl
• .nesa
• .boot
• .noos
• .kuub
• .reco
• bora
• leto
• nols
• werd
• coot
• derp
• nakw
• meka
• toec
• mosk
• lokf
• peet
• grod
• mbed
• kodg
• zobm
• rote
• msop
• hets
• righ
• gesd
• merl
• mkos
• nbes
• piny
• redl
• kodc
• nosu
• reha
• topi
• npsg
• btos
• repp
• alka
• bboo
• rooe
• mmnn
• ooss
• mool
• nppp
• rezm
• lokd
• foop
• remk
• npsk
• opqz
• mado
• hope

How I can decrypt STOP djvu ransomware for free?

Check the video below on how to download STOPDecrypter tool and try to decrypt the files on your own.

Updates on STOP djvu Ransomware

Newer STOP (DJVU) Ransomware variants and other ransomwares have been reported to spread by downloading & using  adware bundles, pirated software, activators for Office and Windows, cracks. and shady sites.

• Newer Djvu* variants are spread by downloading software cracks and adware bundles
• New Rumba STOP Ransomware Being Installed by Software Cracks
• 360 Discovered a New Ransomware Disguised as Windows Activator
• Be Careful of the KMSPico Activator It could be a Ransomware!
• Meet Stop Ransomware: Cracks, Adware bundles, and shady sites

– Newer STOP (DJVU) Ransomware variants are also installing the Azorult Trojan which steals passwords.

I need help! I cannot decrypt STOP (Djvu) encrypted files for free and I need them!

Our team helps companies like yours that have STOP Ransomware Incidents to get their files back with any means.

We will guide you throughout the process and help you get your files back if you cannot do it yourself.

Contact our STOP Ransomware Incident Response team and we can help you remotely decrypt your files and be prepeared for the next Ransomware Incident.