Kadorff

Hi @Wesly.Zhang, Please find the sample as the link below : https://drive.google.com/drive/folders/1nfP833vfKxMJyTwTL4HcUV8-87uqfOpO?usp=sharing ._readme is message of attacker and other is .xlsx file that locked by .moqs extension. Hope we can get solution, and also all DJVU ransomeware can destroyed Thanks before Hello, I see this file you have attached in google driver is a infected file ,not ransomware original file (maybe a exe, xls, word file with vba script). Regards. I have the same problem with moqs extension and I still haven't found a solution

Hi @Wesly.Zhang, Please find the sample as the link below : https://drive.google.com/drive/folders/1nfP833vfKxMJyTwTL4HcUV8-87uqfOpO?usp=sharing ._readme is message of attacker and other is .xlsx file that locked by .moqs extension. Hope we can get solution, and also all DJVU ransomeware can destroyed Thanks before Hello, I see this file you have attached in google driver is a infected file ,not ransomware original file (maybe a exe, xls, word file with vba script). Regards. This link contains an original and an infected file. Both are the same file. Hope this helps.https://drive.google.com/drive/folders/1iD_gI-BLISvjxyKMvnGWqNcCJMdiYdus?usp=sharing