mohamed ghanem 0 Posted January 21 Share Posted January 21 hi how i can decrypt cdpo files? thanks Link to comment Share on other sites More sharing options...
Administrators Marcos 5,259 Posted January 21 Administrators Share Posted January 21 In order to determine the variant of ransomware, please provide: 1, A couple of encrypted files (ideally Office documents) 2, The ransomware note with payment instructions 3, Logs collected with ESET Log Collector assuming that you have an ESET license and ESET was installed at the time of encryption. Link to comment Share on other sites More sharing options...
itman 1,746 Posted January 21 Share Posted January 21 This is the latest variant of STOP/DJVU ransomware. Unfortunately, file decryption is not possible. More information here: https://malwaretips.com/blogs/cdpo-virus/ Link to comment Share on other sites More sharing options...
itman 1,746 Posted January 22 Share Posted January 22 (edited) Some additional ways partial data recovery might be possible; Quote Some victims state that they've successfully restored a part of encrypted data using PhotoRec tool developed by CGSecurity (Christophe Grenier). You can download this tool from CGSecurity's official website. Now it is worth noting that Djvu ransomware does not encrypt the entire file. Instead, it encrypts only a portion (start) of the file, thereby making it unusable. Luckily, in some cases it is possible to restore other part of the file, which is not encrypted. This is useful when it comes to audio/video files, because even though the start won't be restored, you'll still be able to use most of it. To restore audio/video data we advise you to use Media_Repair tool developed by DiskTuna. This tool is extremely simple and completely free. You can find the user manual as well as download the tool directly from DiskTuna's website. https://www.pcrisk.com/removal-guides/28739-cdpo-ransomware Edited January 22 by itman Link to comment Share on other sites More sharing options...
Recommended Posts