Remove .stone Files Virus (STOP) and Decrypt Files (Update July 2019)

Remove .stone Files Virus (STOP) and Decrypt Files


What is .stone Files Virus? How to remove it from infected PC? Can .stone files be recovered?

The so-called .stone files virus is a nasty ransomware infection that corrupts computer systems with the goal to encode personal files and demand a ransom fee for their recovery. The name of this threat is a derivative of the extension it appends to all encrypted files. As a strain of STOP ransomware, .stone cryptovirus utilizes the strong cipher algorithm Salsa20 to transform the code of target files and leave them out of reach.

If you are a victim of .stone files virus, you can keep up with our guide to find removal and data recovery help.

Threat Summary

Name.stone Files Virus
TypeRansomware, Cryptovirus
Short DescriptionEncrypts files on your computer and extorts a ransom fee for their recovery.
SymptomsImportant files are locked and renamed with .stone extension. You see a ransom message that forces you to contact hackers for a decryption tool.
Distribution MethodSpam Emails, Email Attachments
Detection Tool See If Your System Has Been Affected by .stone Files Virus


Malware Removal Tool

User ExperienceJoin Our Forum to Discuss .stone Files Virus.
Data Recovery ToolWindows Data Recovery by Stellar Phoenix Notice! This product scans your drive sectors to recover lost files and it may not recover 100% of the encrypted files, but only few of them, depending on the situation and whether or not you have reformatted your drive.

.stone Files Virus – Update June 2019

The good news for all victims of STOP .stone ransomware is that the security researcher Michael Gillespie cracked the code of this variant and released an updated version of his STOP ransomware decrypter.

So the moment you remove all malicious files and objects from your infected system you can enter our data recovery guide where you will find a download link for the free .stone decryption tool and learn how to proceed with the decryption process.

Decrypt Files Encrypted by STOP Ransomware

Have in mind that the tool is designed to support specific offline IDs, so it may not be effective for all occasions of .stone ransomware infections.

.stone Files Virus – How Does It Infect and What Does It Do?

The .stone files virus has been identified as a strain of

STOP ransomware. The main purpose of this threat is to encode valuable personal files as a precondition for ransom extortion. It has recently been spotted on the malware scene. So keep in mind that the ransomware is lurking across the web in active attack campaigns.

A common practice used by hackers who distribute ransomware threats like .stone is to launch massive email spam campaigns against users worldwide. The emails that are part of such campaigns characterize with the following elements:

  • A link to compromised web page that is set to download and execute infection files directly on the PC. The URL address to this page may be presented in the form of an in-text link, banner, image, button or full URL address.
  • A malicious file attachment that is presented as legitimate document by the text message. It could be uploaded in a .rar or .zip archive. Such a file could be set to evade active security measures and trick you into running the ransomware on your PC.

The moment the payload file of STOP .stone is started on your system, the ransomware becomes able to apply a vast number of malicious modifications that disrupt system security, contribute to its persistence and enable it to complete the encryption process.

Once .stone ransomware reaches the encryption phase it activates a built-in cipher module which scans the system for certain types of files and encodes them with the strong cipher algorithm Salsa 20. When the original code of target files is transformed, the files receive the extension .stone and remain inaccessible.

Unfortunately, it is likely that all common files that are listed below are among the targets of this nasty ransomware:

  • Audio files
  • Video files
  • Document files
  • Image files
  • Backup files
  • Banking credentials, etc

Since the ransomware restricts yous access the data stored by .stone files, it tries to blackmail you into paying hackers a ransom fee. For the extortion, the threat drops a ransom message (_readme.txt) and loads it on your screen. It has the following text:

Don’t worry my friend, you can return all your files!
All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase decrypt tool and unique key for you.
This software will decrypt all your encrypted files.
What guarantees you have?
You can send one of your encrypted file from your PC and we decrypt it for free.
But we can decrypt only 1 file for free. File must not contain valuable information.
You can get and look video overview decrypt tool:
Price of private key and decrypt software is $980.
Discount 50% available if you contact us first 72 hours, that’s price for you is $490.
Please note that you’ll never restore your data without payment.
Check your e-mail “Spam” or “Junk” folder if you don’t get answer more than 6 hours.

To get this software you need write on our e-mail:
Reserve e-mail address to contact us:

You should NOT under any circumstances pay any ransom sum to cyber criminals. This action does not guarantee the recovery of your .stone files.

Remove .stone Files Virus and Restore Data

The so-called .stone files virus is a threat with highly complex code that corrupts both system settings and valuable data. So the only way to use your infected system in a secure manner again is to remove all malicious files and objects created by the ransomware. For the purpose, you could use our removal guide that reveals how to clean and secure your system step by step. In addition, you will find several alternative data recovery approaches that may be helpful in attempting to restore files encrypted by STOP .stone ransomware. We remind you to back up all encrypted files to an external drive before the recovery process.

Gergana Ivanova

Gergana Ivanova

Gergana has completed a bachelor degree in Marketing from the University of National and World Economy. She has been with the STF team for three years, researching malware and reporting on the latest infections.

More Posts

Follow Me:
Google Plus

1 Comment

  1. Avatarsin socheata

    I try to use stopdecrypter to decrypt my encrypted file by .stone virus, then this software gave me some information :
    No key for ID: GbjwEJCpPmEzOxErFJscioFPZaqBk534KaTAR2qD (.stone )
    Unidentified ID: GbjwEJCpPmEzOxErFJscioFPZaqBk534KaTAR2qD (.stone )
    MACs: E0:D5:5E:49:13:FB, C2:25:E9:24:08:9B, C0:25:E9:24:08:9B, C0:25:E9:24:08:9B
    Decrypted 0 files, skipped 51
    i don’t know to do next. please help me


Leave a Comment

Your email address will not be published. Required fields are marked *

Time limit is exhausted. Please reload CAPTCHA.

Share on Facebook Share
Share on Twitter Tweet
Share on Google Plus Share
Share on Linkedin Share
Share on Digg Share
Share on Reddit Share
Share on Stumbleupon Share