.derp Ransomware attack

Question

My PC has been affected by .derp ransomware.

All files on HDD had been encrypted by .derp extension.

Please help me to retrieve/decrypt files.

Answer 1

Hi Manthan,

I am Sumit, an Independent Advisor and a 2-Year Windows Insider MVP here to help.

The new variants of STOP ransomware including derp most probably cannot be decrypted as an online key is used.

Please read this support topic:

https://www.bleepingcomputer.com/forums/t/67147...

A decryptor for the STOP Ransomware has been released by Emsisoft and Michael Gillespie that allows you to decrypt files encrypted by 148 variants of the infection for free....anyone who was infected after August 2019 cannot be helped with this service. With that said, it may be possible to decrypt using an offline key, so even with these variants there may be some success.

Disclaimer:

This is a non-Microsoft website which would provide accurate and safe information. Watch out for ads on the site which are frequently classified as a PUP (Potentially Unwanted Products). There is no need to buy paid products to fix your computers as they do more harm than good sometimes.

Answer 2

Hi.  You all should have known by now.

Emsisoft Anti-malware freely publishes the encryption keys for Ransomware.

If emsisoft has cracked the code fo .derp Ransomware attack,

they will see to it that you get the code.

Free.  You can't beat that hey .

They will also tell you don't pay the ransom.

 so please contack them immediately .

Shalom,

cE.

Answer 3

Thanks for help Sumit.

Answer 4

You can keep your most important decrypted files so if there is a decryptor released in the future, it would help. It won't in days, to be honest, it can take months.

A clean install is necessary to remove an infection. In the future, please be careful of suspicious links, emails and make RDP secure if you use it.

Also, install an anti-ransomware program like of Malwarebytes,

Answer 5

Thanks for quick response.

.derp decryptor is not available on above mentioned link.

My files had been encrypted with ONLINE keys.

It has also blocked access to Windows defender and firewall.

What should I do?

Should i format HDD and start fresh or wait for some decrytor tool?