.
.
UPDATE 01/14/22: The information in this topic is outdated and JpegMedic ARWE is no longer available for free.
.
Hi!
I want to introduce my tool JpegMedic ARWE.
As we know STOP/DJVU ransomware encrypts only the beginning of the file. The encrypted part is often 153605 bytes, and it is not so much for JPEG files. So we can try to repair the non-damaged part of JPEG image.
The principle of recovery is simple. We need one non-damaged JPEG file created by the same camera with the same settings as encrypted images. We take the metadata from a good JPEG file and combine it with the intact part of the encrypted file, then we use some algorithmic magic to get the correct JPEG file but without a few lines at the top of the image. JpegMedic ARWE does the entire recovery process fully automatically.
Video demonstration:
https://www.youtube.com/watch?v=YbDuN7-kE2s
The tool is free for personal use.
Tool home page: https://www.jpegmedic.com/tools/jpegmedic-arwe/