G DATA vaccine for STOP / DJVU Ransomware
STOP Ransomware vaccine block files encryption after infect
G DATA, the German security software company has released a vaccine that can Stop this Ransomware works before encrypting.
G DATA malware analysts Karsten Hahn and John Parol explained that "This tool does not prevent the infection itself. STOP ransomware will still place ransom notes and may change settings on the systems, But STOP ransomware will not encrypt files anymore if the system has the vaccine. Instead of a personal ID, the ransom notes will contain a string that files were protected by the vaccine."
You can download the STOP Ransomware vaccine, as a compiled .EXE or Python script.
Don't worry if Karsten John vaccine may cause your security software to believe your system is infected since it works by adding files the malware usually deploys on infected systems to trick the ransomware the device was already compromised.
Emsisoft and Michael Gillespie decryptor was also released for STOP Ransomware in October 2019 to decrypt files encrypted by 148 variants for free, it no longer works with newer variants. Hence, G DATA's vaccine is your best bet if you want protection against this ransomware strain.
However, since threat actors commonly bypass vaccines after they are released, this vaccine may stop working for future versions of this ransomware when the ransomware developers release that.
You should ensure that your important files are also backed up, before applying the vaccine.
While other ransomware strains get the most media attention, STOP ransomware has constantly been behind the most significant slice of ID Ransomware submissions and support requests on Mango School channel in recent years.
STOP ransomware hits between 60 and 70 % systems.
This is because this ransomware mainly targets home users through pirated software or adware bundles disguised as free programs.
The latter usually install a wide range of unwanted software onto a user's computer, and, more often than not, one of the programs installed is malware such as STOP Ransomware.
Cracks reported like KMSPico, Cubase, Photoshop, and antivirus software to have been used in STOP Ransomware delivery include.
Besides using this deployment method, STOP is just your ordinary ransomware, which encrypts files, appends an extension, and drops a note asking for a ransom $980.
However, what makes it so successful is the massive amount of variants constantly being released to avoid detection.
