Abdulrahman Rabea 1 Posted September 1, 2019 Share Posted September 1, 2019 my files was encrypted with ransomware called .gero what should i do , i remove it from my pc but all file was encrypted Mosaicx 1 Link to comment Share on other sites More sharing options...
Administrators Marcos 5,070 Posted September 1, 2019 Administrators Share Posted September 1, 2019 If you have purchased a license for ESET, please contact samples[at]eset.com and provide the following: - a handful of encrypted files (ideally Office documents) - the ransomware note with payment instructions - logs collected with ESET Log Collector (ESET must be already installed, activated and updated beforehand) Link to comment Share on other sites More sharing options...
Abdulrahman Rabea 1 Posted September 1, 2019 Author Share Posted September 1, 2019 I haven't bought a subscription yet but the encryption got before I bought the subscription what should i do ? All college files have been encrypted 😥😥 _readme.txt Link to comment Share on other sites More sharing options...
hecatomb 0 Posted September 2, 2019 Share Posted September 2, 2019 On 9/1/2019 at 7:07 PM, Abdulrahman Rabea said: I haven't bought a subscription yet but the encryption got before I bought the subscription what should i do ? All college files have been encrypted 😥 Hello, I have same virus. Could u tell me how did u solve it? Link to comment Share on other sites More sharing options...
Abdulrahman Rabea 1 Posted September 2, 2019 Author Share Posted September 2, 2019 2 hours ago, hecatomb said: Hello, I have same virus. Could u tell me how did u solve it? i don't 😥😥 Link to comment Share on other sites More sharing options...
itman 1,659 Posted September 2, 2019 Share Posted September 2, 2019 (edited) This is a STOP ransomware variant. There is currently no decrptor available for it. Your best bet for help is this web site: https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/?p=4860779 . Also make sure you read all the comments mentioned about the forensic tool mentioned that posters have said worked. It is a not a file decryptor. As such, I am skeptical of it. Edited September 2, 2019 by itman Link to comment Share on other sites More sharing options...
Abdulrahman Rabea 1 Posted September 3, 2019 Author Share Posted September 3, 2019 On 9/2/2019 at 9:08 PM, itman said: This is a STOP ransomware variant. There is currently no decrptor available for it. Your best bet for help is this web site: https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/?p=4860779 . Also make sure you read all the comments mentioned about the forensic tool mentioned that posters have said worked. It is a not a file decryptor. As such, I am skeptical of it. it's don't work Link to comment Share on other sites More sharing options...
Recommended Posts