All Activity

This stream auto-updates     

  1. Today
  2. To identify the Ransomware and confirm my information, you can use the service ID Ransomware. He will give you a link to the support topic on the BleepingComputer forum, you need to read the first post of the topic and inform the requested information there or here - Mac-address of network device.
  3. This variant of STOP Ransomware with .rectot extension appeared 3 days ago. See my posts and post GT500 in next topic - in the same order. This also applies to your case. It's first best to check PC and make sure that no malware components have been left behind, so I recommend following the instructions at the link below to get us logs from FRST so that one of our experts can make sure there is nothing malicious still on your computer (please attach the log files FRST saves to a reply to this topic on the forums): https://help.emsisoft.com/en/1738/how-do-i-run-a-scan-with-frst/ Note: If anything that appears suspicious is found in your logs, then your post will be moved into a new topic to facilitate better communication between you and whoever is assisting you. We'll also try to make sure that you are following the new topic so that you receive e-mail notifications when someone replies to it. Let us know about the results.
  4. WELA Hello. This is also the result of the STOP Ransomware attack. The variant with .forasom extension was spreaded before (since May 6, 2019) See my posts above and post GT500 - in the same order. This also applies to your case.
  5. Could you help me? My data has lost by .forasom? I really need your help, thank you
  6. hi How to remove Rectot ransomware or How to encrypt the files that are the ransomware rectot encrypt my file feeds? https://malwaretips.com/blogs/remove-rectot/
  7. Thank you mr.. Hope It's not long..
  8. scan_190525-055127.txtFRST.txtAddition.txt
  9. I don't see any leftovers from the STOP/Djvu ransomware, however I do some some files related to pirated software that I highly recommend getting rid of.
  10. I've forwarded your ID and MAC addresses to the creator of STOPDecrypter so that he can archive them in case he is able to figure out your decryption key at some point in the future. I've forwarded your ID and MAC addresses to the creator of STOPDecrypter so that he can archive them in case he is able to figure out your decryption key at some point in the future.
  11. Hopefully it won't be much longer before he's able to find the offline ID and key for this variant of STOP/Djvu.
  12. Yesterday
  13. I've forwarded your ID and MAC addresses to the creator of STOPDecrypter so that he can archive them in case he is able to figure out your decryption key at some point in the future.
  14. You may have already seen this, but Demonslay335 on the BleepingComputer forums said that this is JSWorm 2.0, and that our decrypter for it has been updated: https://www.bleepingcomputer.com/forums/t/698141/jsworm-ransomware-jsworm-jurasik;-jsworm-decrypttxt-support/#entry4792780 You can find the decrypter here: https://www.emsisoft.com/decrypter/jsworm-20
  15. A lot of the things I saw in the log were missing when the fix was run. There are two likely explanations. Either another tool removed them before the fix was run, or there are infections on the system that keep changing their file names and load points in order to make removal more difficult. For now, run a Malware Scan with Emsisoft Emergency Kit (EEK) and quarantine anything it finds (do not click "Delete"), and be sure to save the report (you can view it after the scan and then save it from there) when it's done and attach it to a reply. You can download it at the following link: https://www.emsisoft.com/en/home/emergencykit/download/ After running the scan with EEK, please run another scan with FRST and post the new logs in a reply so that I can make sure that everything was taken care of. Note that if EEK wants to restart your computer after scanning that you should do so before running FRST again.
  16. The dump needs to be saved when the crash happens. If it needs to be caught automatically, then this is the easiest way: https://help.emsisoft.com/en/1772/how-do-i-configure-automatic-crash-dumps-in-case-of-application-failures/
  17. Hello, We are unable to provide assistance with compromised Web Sites. Contact your hosting provider and update your CMS and plugins.
  18. MY FRST REPORT: ATTACHED AS A FILE BELOW. Addition.txt FRST.txt Search.txt
  19. [!] No keys were found for the following IDs: [*] ID: bwVJLrUFtzutHXui1MCvtQw7baY8jcfIt3avTOVz (.radman ) Please archive these IDs and the following MAC addresses in case of future decryption: [*] MACs: 82:C5:F2:71:83:C3, 80:C5:F2:71:83:C3, 80:C5:F2:71:83:C2 This info has also been logged to STOPDecrypter-log.txt
  20. Thanks GT500. I followed your advice. [!] No keys were found for the following IDs: [*] ID: bwVJLrUFtzutHXui1MCvtQw7baY8jcfIt3avTOVz (.radman ) Please archive these IDs and the following MAC addresses in case of future decryption: [*] MACs: 82:C5:F2:71:83:C3, 80:C5:F2:71:83:C3, 80:C5:F2:71:83:C2 This info has also been logged to STOPDecrypter-log.txt
  21. Do you mean a pre-emptive dump, when I dump a perfectly working Firefox on the off-chance that something in its dump will show a potential problem, or do you mean doing something (to Windows?) to make sure that next time this happens a full dump is taken? As I said before I'm unaware of these crashes when they happen & there's no dump, that I'm aware of. Even if I monitor the arrival of 'pending' dump submission info in the relevant FF folder, I'm quite likely going to have no idea of even which tab in FF was the problem.
  1. Load more activity
  • Who's Online   0 Members, 0 Anonymous, 47 Guests (See full list)

    There are no registered users currently online

  • Newsletter

    Want to keep up to date with all our latest news and information?

    Sign Up