Need help recovering two important PSD files encrypted by STOP/DjVu ransomware
Hello Adobe Photoshop community,
I need help with recovering two extremely important Photoshop PSD files.
About 7 years ago, my laptop was infected with STOP/DjVu ransomware. Two of my PSD files were encrypted and now have the .psd.todar extension.
I still have the original encrypted files, but unfortunately I no longer have the original unencrypted versions.
I have already tried the official Emsisoft STOP/Djvu decryptor, but the decryptor has not successfully recovered the files. I am also looking into other legitimate recovery options.
I understand that Adobe may not be able to decrypt ransomware encryption. However, I would like to know whether anyone with expertise in Photoshop's PSD file format can determine whether any recoverable Photoshop data remains inside these files — such as the image, layers, previews, thumbnails, or document structure.
The ransomware personal ID from the ransom note is:
124Asd458uolhJSboVUVxizSvbq8vO4aKqgaUrk2LIqIegkSzBAQdErh
I still have both encrypted PSD files and can provide them through a secure method if someone from Adobe or the Photoshop technical team needs to examine them.
These files are extremely important to me, so I would appreciate any legitimate recovery method or advice from someone experienced with damaged/encrypted PSD files.
Thank you.
