hello, i am very desperate to ask help to anybody, i am very terrified, this last november 24 i was trying to download a crack software to use for onscreen takoff for me to count a quantity in pdf file drawing, then i found a website where can i download, after i install it suddenly my browser opens up by itself and redirecting it to an unknown website, that time i already new that i mistakenly downloaded a virus, which is my very first encounter and i didn't know this virus exist, the "ransomware attack", after a minute or 30, windows updating suddenly pops up below right side of my screen, no option to stop and exit only "ok" then i press ok, after that my files was encrypted, i dont know what to do,after a minute it spread very fast in our server and infected 2 very important files of our boss and i unlpuged the network router with internet hoping the spread will stop, i disconnected my pc to observe, then i start to research the problem in the internet using other pc, and i discovered that it was a ransomware attack, they leave a _readme.txt which indicates a ransom note asking for money, i search a way to remove the ransomware using 5 different anti virus and recovery restore point, but i cannot recover the files, they said it was online key encryption, please i'm begging you please help me... i tried to message to the email in the ransomnote i tried to beg for the decryption but they hesitate... please help me sir..
Dear Dina,
Sorry to hear that you’ve become a victim of ransomware attack. Unfortunately, if your files were encrypted with online key, there is nothing to do now because only the criminals can restore them (if they are willing to do so at all). This is the whole point of ransomware and why it has been so successful for years. Victims of STOP/DJVU can only recover their files is if an offline key was used to encrypt files. You can check whether any of the files were subject to offline key encryption by going to C:\SystemID\PersonalID.txt. Here, check if any of the IDs end in t1. Next, we suggest you to read these instructions about using STOP decryptor. Finally, backup the encrypted data that you failed to restore - cybersecurity experts are working on ways to restore some file types, so one day a miracle might happen. However, you need to be patient because breaking cryptography is a hard work...
Regards, Norbert
by the way sir, in case you need the ransomware in order to study it for the description, i can still remember the website that the ransomware came from, but i don't know if it still exist because i already reported it the google for them to remove