How to remove STOP (DJVU) Ransomware and decrypt .berost, .fordan, .codnat or .codnat1 files

Standard

STOP Ransomware (DJVU Ransomware is one of subtypes) is high-risk file-encrypting virus, that affects Windows systems. In May, 2019, new generation of this malware started encoding files using .berost,.fordan, .codnat or .codnat1 extensions. Virus targets important and valuable file types such as photos, documents, videos, archives, encrypted files become unusable. Ransomware puts _readme.txt file, that is called “ransom note” or “ransom-demanding note” on the desktop and in the folders with encrypted files. Hackers demand $980 for decryption of your files (message states, that victims will get 50% discount if they’ll contact cyber criminals within 72 hours after the encryption). According to many reports, malefactors often don’t reply to victims, when they receive ransom payment. We strongly do not recommend paying any money. Files encrypted by some versions of STOP (DJVU) Ransomware can be decrypted with help of STOPDecrypter.

By continuing to use the site, you agree to the use of cookies. more information

The cookie settings on this website are set to "allow cookies" to give you the best browsing experience possible. If you continue to use this website without changing your cookie settings or you click "Accept" below then you are consenting to this.

Close