manuruiz 0 Posted November 23, 2018 Report Share Posted November 23, 2018 Hi, I find infected files with the extension. Foamx Do they have a solution? !readme.txt curva epidemiologica.xlsx.pumax Quote Link to post Share on other sites
GT500 853 Posted November 23, 2018 Report Share Posted November 23, 2018 ID Ransomware flagged this as a variant of the STOP ransomware:https://id-ransomware.malwarehunterteam.com/identify.php?case=70d81d557bdcef98bc0eb90e49f12816087ac70a If you get in touch with Emmanuel on the BleepingComputer forums, then he may be able to assist you with contacting Dr.Web. They may have a way of decrypting files, however please note that Dr.Web won't decrypt files for free (they only do it for customers who have a license for their business Anti-Virus software):https://www.bleepingcomputer.com/forums/u/1046137/emmanuel-adc-soft/ Note that Emmanuel is a reseller for Dr.Web, and if Dr.Web can decrypt your files he can help you with buying the license key that they require before they will decrypt anything for you. Also note that as a reseller, he does make money off of this transaction. Quote Link to post Share on other sites
manuruiz 0 Posted November 23, 2018 Author Report Share Posted November 23, 2018 Thanks Quote Link to post Share on other sites
JustinAU 0 Posted November 24, 2018 Report Share Posted November 24, 2018 Hi there, I have also been infected by this virus. the documents have extension name .Pumax and pretty much all directories have jpgs, mp3's etc with .Pumax at the end. Ofcourse unable to open. It appears the files in my main desktop directory are untouched. If there is a a readily available decryptor out there that can allow me to access them that would be great otherwise I will have to wait it out. The virus jumped onto my PC as a pretend Windows updater and then a bunch of programs starting running by themselves on startup etc. I believe I have removed the virus from my PC but my files are my main concern. Thankyou and hopefully someone takes the time to help out, All the best. 1 Quote Link to post Share on other sites
GT500 853 Posted November 24, 2018 Report Share Posted November 24, 2018 10 hours ago, JustinAU said: If there is a a readily available decryptor out there that can allow me to access them that would be great otherwise I will have to wait it out. There is no publicly available decrypter, however Dr.Web may be able to help you with decryption. I'll leave a copy below of what I posted above: 22 hours ago, GT500 said: If you get in touch with Emmanuel on the BleepingComputer forums, then he may be able to assist you with contacting Dr.Web. They may have a way of decrypting files, however please note that Dr.Web won't decrypt files for free (they only do it for customers who have a license for their business Anti-Virus software):https://www.bleepingcomputer.com/forums/u/1046137/emmanuel-adc-soft/ Note that Emmanuel is a reseller for Dr.Web, and if Dr.Web can decrypt your files he can help you with buying the license key that they require before they will decrypt anything for you. Also note that as a reseller, he does make money off of this transaction. Quote Link to post Share on other sites
faysal 0 Posted November 25, 2018 Report Share Posted November 25, 2018 19 hours ago, JustinAU said: Hi there, I have also been infected by this virus. the documents have extension name .Pumax and pretty much all directories have jpgs, mp3's etc with .Pumax at the end. Ofcourse unable to open. It appears the files in my main desktop directory are untouched. If there is a a readily available decryptor out there that can allow me to access them that would be great otherwise I will have to wait it out. The virus jumped onto my PC as a pretend Windows updater and then a bunch of programs starting running by themselves on startup etc. I believe I have removed the virus from my PC but my files are my main concern. Thankyou and hopefully someone takes the time to help out, All the best. SqlDataDel_Subplan_1_20180902110001.txt.pumax Quote Link to post Share on other sites
faysal 0 Posted November 25, 2018 Report Share Posted November 25, 2018 all Ready attack me. .pumax Quote Link to post Share on other sites
GT500 853 Posted November 25, 2018 Report Share Posted November 25, 2018 On 11/23/2018 at 3:44 PM, GT500 said: If you get in touch with Emmanuel on the BleepingComputer forums, then he may be able to assist you with contacting Dr.Web. They may have a way of decrypting files, however please note that Dr.Web won't decrypt files for free (they only do it for customers who have a license for their business Anti-Virus software):https://www.bleepingcomputer.com/forums/u/1046137/emmanuel-adc-soft/ Note that Emmanuel is a reseller for Dr.Web, and if Dr.Web can decrypt your files he can help you with buying the license key that they require before they will decrypt anything for you. Also note that as a reseller, he does make money off of this transaction. Quote Link to post Share on other sites
GT500 853 Posted November 30, 2018 Report Share Posted November 30, 2018 @manuruiz a free decrypter for this ransomware has been shared by Michael Gillespie, and should help you recover your files: Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.