REPL ask for money

[djati]

need help, i got REPL virus ask for ransom, how to recover my file? i cannot open all my file, i have malwarebytes premium, but it doesnt works. cannot detect the virus

 

[struppigel]

Hello djati,

I am Karsten and will gladly help you with any malware-related problems.

Please familiarize yourself with the following ground rules before you start.

• Read my instructions thoroughly, carry out each step in the given order.
• Do not make any changes to your system, or run any tools other than those I provided. Do not delete, fix, uninstall, or install anything unless I tell you to.
• If you are unsure about anything or if you encounter any problems, please stop and inform me about it.
• Stick with me until I tell you that your computer is clean. Absence of symptoms does not mean that your computer is free of malware.
• Back up important files before we start.
• Note: On weekends I might be slow to reply

-------------------------------------------------------------------

The file extension .repl has been used by STOP/DJVU ransomware. This ransomware mostly infects systems via malicious software downloads, in many cases these are cracks, patches, keygens.

STOP/DJVU ransomware variants after August 2019 are only decryptable if an offline key was used. For variants with an online key you cannot decrypt but repair certain file types.

Please upload an encrypted file and a ransom note to id-ransomware to confirm that it is indeed STOP/DVJU ransomware. Tell me the result.

 

[djati]

ok, thanks, for your attention, FYI, before i joint this grup, last night i did some thing to my pc, like scaned with malmarebytes and windows defender, is it ok?

 

[struppigel]

Yes that's fine. Not installing software and not scanning and deleting stuff on your own is mainly important for when we start cleaning your system. Which we can do, if you want to. Just let me know.
The ransomware itself won't be there anymore. Most ransomware deletes itself after encrypting the files. Furthermore, as STOP/DJVU is in the vast majority of cases a bad software download, it doesn't involve other malware.

Let me know the result of id-ransomware.

 

[struppigel]

Are you still with me? I haven't heard from you in a while.

 

[struppigel]

Locking this thread due to inactivity.