How to Decrypt Files Locked by STOP/DJVU Ransomware

STOP/DJVU Ransomware encrypts victim’s files with Salsa20, and appends one of dozens of extensions to filenames; for example, “.wrui”, “.pcqq”, “.ytbn”, “.nusm”, “.ehiz“, “.xcmb” etc. The ransom note “_readme.txt” contains the following text: ATTENTION! Don’t worry, you can return all your files! All your files like photos, databases, documents and other important are encrypted with … Continue reading How to Decrypt Files Locked by STOP/DJVU Ransomware