RansomWare converts files to .RUMBA

[yveslyndelblase]

mga sir patulong po.
pinasok ng virus ang pc ko kaninang umaga and ngayon ko lang naencounter tong virus na ito ginagawa nyang .RUMBA lahat ng files pati mga files ko sa Drive D: nadamay
Baka meron nang nakaencounter sa inyo ito mga sir at baka alam nyo kung paano marecover mga files?
nasa baba screenshot ko ng sample files na naging .RUMBA

View attachment 360331View attachment 360331

 

[Allego]

https://www.bleepingcomputer.com/fo...-suspended-yourdatarestore-txt-support-topic/
Read then try mo yung decryptor nila for .rumba kung working. I'm not responsible kung may mangyayaring mali kapag ginamit mo ito. Use at your own risk.

Other solution (also the best) is restore from backup. Kung wala kang backup, last chance mo na yang decryptor na yan. Kung not working, GG. Reinstall OS, Practice Safe Habits, Back up regularly and learn the lesson.

https://www.bleepingcomputer.com/ne...ansomware-being-installed-by-software-cracks/ Baka sa ginamit mong crack yan gaya ng ibinalita rito. "Turn off antivirus pa"

 

[stevenkulit]

same.. here problem me nakasolb naba?: praise:

 

[yveslyndelblase]

https://www.bleepingcomputer.com/fo...-suspended-yourdatarestore-txt-support-topic/
Read then try mo yung decryptor nila for .rumba kung working. I'm not responsible kung may mangyayaring mali kapag ginamit mo ito. Use at your own risk.

Other solution (also the best) is restore from backup. Kung wala kang backup, last chance mo na yang decryptor na yan. Kung not working, GG. Reinstall OS, Practice Safe Habits, Back up regularly and learn the lesson.

https://www.bleepingcomputer.com/ne...ansomware-being-installed-by-software-cracks/ Baka sa ginamit mong crack yan gaya ng ibinalita rito. "Turn off antivirus pa"

dito sir. try ko ito pag may time ako.

- - - Updated - - -

same.. here problem me nakasolb naba?: praise:

wala pa sir pero try mo sir yong recommendation ni sir sa taas ng comment mo.

 

[arman666]

mahilig ako jan sa pag-alis ng virus but di ko pa na-eencounter yan, (1)try mo safe mode(f8), (2)tingnan mo lahat sa startup using msconfig, (3)view mo lahat hidden files, (4)use 3rd party software to clean(e.g.ccleaner, iobit toolbox and revo uninstaller), (5) use run command then type mo po shell:startup then enter, delete mo po lahat sa startup lalo na yung hidden files, (6) use run command again, then type mo po %temp% then enter, delete mo din lahat ng temp files, (7) then restart in normal mode, force remove/uninstall internet explorer using iobit unlocker.

then para mabalik sa dati yung extension name ay may biniburang .db file sa os, ano pong os gamit nyo?

goodluck po

 

[aldrindevera]

ako natamaan din ng virus na yan.. naging .etols lahat ng data ko

 

[Allego]

ako natamaan din ng virus na yan.. naging .etols lahat ng data ko

sadly bagong variant yan kaya wala pang lunas at walang kasiguraduhan kung makakagawa sila. Nagtataka ako kung saan at paano kayo naapektuhan niyan?

 

[iamrommel]

https://www.bleepingcomputer.com/ra...ware-decryptor-gets-your-files-back-for-free/

 

[Allego]

https://www.bleepingcomputer.com/ra...ware-decryptor-gets-your-files-back-for-free/

sadly it won't work kasi according kay ts, naging .etols daw yung mga files niya which hindi niya sakop.