.REPP File

A file with a .repp extension is a file that has been encrypted by the Repp virus, which is a variant of STOP (Djvu) ransomware that became prevalent in early 2020. It is encrypted so it is not possible to open the file by simply changing the .repp file extension.

Repp is a type of malware utilized by cybercriminals that takes a user's files hostage and forces him to pay the perpetrator to unlock the files. It is most often introduced to a victim's computer through spam emails with malicious links or file attachments that are downloaded and run by unsuspecting users. The virus may also be introduced when a user clicks on fake social media posts or downloads malicious files from torrent websites.

When the ransomware runs on a user's computer, it encrypts files on the computer and adds the .repp extension onto the names of the files. The types of files typically targeted include documents, images, videos, and backup files, such as .DOCX, .JPG, .WMV, and .DB files. For example, a document.pdf file becomes document.pdf.repp.

The virus then generates a _readme.txt file in each folder that stores an encrypted file on the user's computer. The _readme.txt file contains instructions explaining the hostile takeover of the user's files and how the user can recover his files by paying a ransom payment.

Currently, there is no program available to effectively restore infected files. If the user has a recent backup of his files, he can perform a system restore to remove the virus but any changes made to files after the backup was made will be lost.