Author Topic: Need help with Stampado  (Read 2922 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Need help with Stampado
« on: February 22, 2017, 09:04:45 AM »
Go this thing somewhere from the torrent pretending as a legit software (was 24Gb archive with different data).
I run this crap with hope my ESET Smart Security 10 will detect if any malware there and...nothing! ESS still cannot see anything in that exe. Bullshit.
When I run thin thing and found that nothing happened - checked task manager and got damn scvhost.exe WTF!
Killed this damn crap and all his files and startup entries but it still encrypted some fresh documents I don't have in backup.
All decryption tools (except from avast) ask for ransomware email and ID which I never get because this thing didn't finish it's job.

Tried several tools to decrypt my files. Nothing.
Got Avast Decryption Tool for Stampado v.1.0.28.0 and now 1.0.29.0. It asked for original file (got one from backup) and encrypted. Spent 26 min with no success  :( Several times. Different files.
So looking for help here.

Still have that Stampado.exe - download from (link removed)
And two files (encrypted and original) - download from here.

BTW filenames are encrypted too and encrypted file is slightly bigger than original one.
« Last Edit: February 22, 2017, 06:58:32 PM by Mr.Mars »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Need help with Stampado
« Reply #1 on: February 22, 2017, 09:35:28 AM »
Please remove the links from your post.
We do not want people to download (possible) malware.

For help with removal of malware, follow these instructions > https://forum.avast.com/index.php?topic=194892.0

eSet sure does detect it > https://www.virustotal.com/en/file/a3545773c9a4cf69870e5e3bbdf98175a858340ac3e06ad7a0c073b1c0b2b1e1/analysis/1487752428/

REDACTED

  • Guest
Re: Need help with Stampado
« Reply #2 on: February 22, 2017, 07:04:04 PM »
Ok I removed the link.
I'm under ESET Smart Security Premium right now and 3 days ago I was able to copy this stampado.exe file freely but got this malware about 3 weeks ago!
When I tried Bitdefender for example in virtual machine I wasn't able to do anything with this file from the beginning about 3 weeks ago.
And yes I tried virustotal that time and only 6-7 antiviruses detected this ransomware.

So any chance to get my documents back?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.

REDACTED

  • Guest
Re: Need help with Stampado
« Reply #4 on: February 22, 2017, 08:23:57 PM »
Yeah I know how to google and tried several Stampado decrypters.
All of them (as I wrote) ask you for ID and ransomware email which I never got because killed it in 2 mins.
Only one tool from avast ask you for encrypted and original file to bruteforce password.
Stampado decryptor by Emsisoft is the same. Will not work in my case and I don't want to run this crap again to let it encrypt everything.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Need help with Stampado
« Reply #5 on: February 22, 2017, 08:26:59 PM »
Delete the encrypted files and restore them from a backup.
If you don't have a backup, the files are lost.

REDACTED

  • Guest
Re: Need help with Stampado
« Reply #6 on: February 22, 2017, 10:56:16 PM »
So you say Avast Decryption Tool for Stampado v.1.0.29.0 is absolutely useless?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Need help with Stampado
« Reply #7 on: February 23, 2017, 04:21:50 AM »
No, but as with all malware there can be a newer version that can't be decrypted now.

REDACTED

  • Guest
Re: Need help with Stampado
« Reply #8 on: February 23, 2017, 04:33:07 AM »
This is why I supplied malware with encrypted and original file. To help developers :)

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Need help with Stampado
« Reply #9 on: February 23, 2017, 04:35:20 AM »

REDACTED

  • Guest
Re: Need help with Stampado
« Reply #10 on: February 23, 2017, 07:03:16 PM »
Quote
How can I submit files?
Quote
Undetected Malware
This one is detected. Maybe I can contact developer of Avast Decryption Tool directly? Is he here on the forum?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37506
  • Not a avast user
Re: Need help with Stampado
« Reply #11 on: February 23, 2017, 07:08:20 PM »