Windows 10: Helps : I have got infected with some ransomware virus that has extension lock (.puma)

Discus and support Helps : I have got infected with some ransomware virus that has extension lock (.puma) in AntiVirus, Firewalls and System Security to solve the problem; my laptop data now are locked or encrypted except my desktop witch until now not touched by the virus . first a notification came to me that looks... Discussion in 'AntiVirus, Firewalls and System Security' started by SaifAlkindi, Nov 25, 2018.

  1. Helps : I have got infected with some ransomware virus that has extension lock (.puma)


    my laptop data now are locked or encrypted except my desktop witch until now not touched by the virus . first a notification came to me that looks like its from Microsoft to install new updates and when i hit ok (yes), i got infected with this virus . Also now i cannot turn on windows defender security centre and cannot turn on controlled folder access. Helps : I have got infected with some ransomware virus that has extension lock (.puma) b6f3805c-c5fc-4d46-a757-783d1996b933?upload=true.png

    :)
     
    SaifAlkindi, Nov 25, 2018
    #1

  2. I have been infected with Ransomware

    Oh.

    I see that a Community Moderator converted your thread from a Discussion to a Question.

    Do you have a question?

    It is not quite clear (to me at least) why you've created this thread....

    In case that you do indeed have a problem with ransomware:

    It would be helpful if you would describe your problem more precisely, see:
    Suggestions for asking a question on help forums


    Without knowing more details, suggestion to read/do:

    Try to identify with what Ransomware you're dealing here:
    https://id-ransomware.malwarehunterteam.com/index.php


    and read/follow this guide:
    How to remove ransomware the right way: A step-by-step guide


    Also: See the pinned threads here:
    https://www.bleepingcomputer.com/forums/f/239/ransomware-help-tech-support/


    Might be the best to get free expert help in above mentioned bleepingcomputer forum....

    =======================

    Also suggestion to read:

     
    Jsssssssss, Nov 25, 2018
    #2
  3. Ransomware infection?

    Any files that are encrypted with MRCR1 Ransomware will have the the
    .MRCR1.PEGS1, .RARE1,
    .RMCM1
    or .MERRY extension appended to the end of the encrypted data filename and leave files (ransome notes) named YOUR_FILES_ARE_DEAD.HTA as explained

    here
    . The ransom note instructs victims to contact the cyber-criminals at "L: *** Email address is removed for privacy ***" or "TELEGRAM @comodosecurity" to get payment instructions.

    You can submit samples of encrypted files and ransom notes to ID Ransomware for
    assistance with identification and confirmation. This is a service that helps identify what ransomware may have encrypted your files and then attempts to direct you to an appropriate support topic where you can seek further
    assistance. Uploading both encrypted files and ransom notes together provides a more positive match and helps to avoid false detections.

    Fabian Wosar released a decryptor tool for victims of this type of infection.

    There is an ongoing discussion in this topic where you can post comments, ask questions and seek further assistance. Other victims have been directed there to share information, experiences and suggestions.


    Most crypto malware ransomware is typically programmed to automatically remove itself...the malicious files responsible for the infection...after the encrypting is done since they are no longer needed. That explains why many security scanners
    do not find anything after the fact. The encrypted files do not contain malicious code so they are safe. Unfortunately, most victims do not realize they have been infected until the ransomware displays the ransom note and the files have already
    been encrypted. In some cases there may be no ransom note and discovery only occurs at a later time when attempting to open an encrypted file. As such, they don't know how long the malware was on the system before being alerted or if
    other malware was downloaded and installed along with the ransomware. If other malware was involved it could still be present so be sure to perform full scans with your anti-virus.
    Disinfection will not help with decryption of any files affected by the ransomware.

    If your antivirus did not detect and remove anything, additional scans should be performed with other security programs like

    Malwarebytes 3.0
    ,
    HitmanPro
    and
    Emsisoft Anti-Malware
    . You can also supplement your anti-virus or get a second opinion by performing an

    Online Virus Scan
    ...ESET is one of the more effective online scanners.
     
    quietman7 - MVP, Nov 25, 2018
    #3
Thema:

Helps : I have got infected with some ransomware virus that has extension lock (.puma)

Loading...
  1. Helps : I have got infected with some ransomware virus that has extension lock (.puma) - Similar Threads - Helps got infected

  2. Malware Help - Infected by 'Redeemer' ransomware virus

    in Windows 10 Gaming
    Malware Help - Infected by 'Redeemer' ransomware virus: I was just using my PC until it suddenly restarted, I thought it was a simple malfunction until I saw that it had been rebooted into Windows 10 Safe Mode I am using Windows 10 OSI am trying to access basic Windows 10 functions that should still work in Safe Mode such as the...
  3. Malware Help - Infected by 'Redeemer' ransomware virus

    in Windows 10 Software and Apps
    Malware Help - Infected by 'Redeemer' ransomware virus: I was just using my PC until it suddenly restarted, I thought it was a simple malfunction until I saw that it had been rebooted into Windows 10 Safe Mode I am using Windows 10 OSI am trying to access basic Windows 10 functions that should still work in Safe Mode such as the...
  4. Malware Help - Infected by 'Redeemer' ransomware virus

    in AntiVirus, Firewalls and System Security
    Malware Help - Infected by 'Redeemer' ransomware virus: I was just using my PC until it suddenly restarted, I thought it was a simple malfunction until I saw that it had been rebooted into Windows 10 Safe Mode I am using Windows 10 OSI am trying to access basic Windows 10 functions that should still work in Safe Mode such as the...
  5. I have infected with Ransomware

    in AntiVirus, Firewalls and System Security
    I have infected with Ransomware: I have windows 7 My device got ransomware with the vvyu extension... Is there a safe free tool that can help me recover my infected files? Thanks[Original Title: Ransomware !!]...
  6. I have infected with ransomware

    in AntiVirus, Firewalls and System Security
    I have infected with ransomware: my pc is attacked with a ransomware and all my files are encrypted as MOQS files....how can i recover them...[Original Title: ransomware] https://answers.microsoft.com/en-us/protect/forum/all/i-have-infected-with-ransomware/ab5a9fe5-bf0f-44ae-8f8d-d712bc019977
  7. I Have been Infected with Ransomware - .LEZP extension.

    in AntiVirus, Firewalls and System Security
    I Have been Infected with Ransomware - .LEZP extension.: ATTENTION! Don't worry, you can return all your files! All your files like photos, databases, documents and other important are encrypted with strongest encryption and unique key. The only method of recovering files is to purchase decrypt tool and unique key for you. This...
  8. I have been Infected with Ransomware - .LEZP extension

    in AntiVirus, Firewalls and System Security
    I have been Infected with Ransomware - .LEZP extension: Hi. We are a Windows 7 user. Today I was attacked by a cyber attack and my computer was hacked. And all my files have the LEZP extension. Please help me to fix this problem. [Original Title: CYBER ATTACK]...
  9. Infected by ransomware having .lapoi extension. Need help to decrypt.

    in AntiVirus, Firewalls and System Security
    Infected by ransomware having .lapoi extension. Need help to decrypt.: Split from this thread. My laptop was infected by ransomware having .lapoi extension.I back up all my files and reinstall the system. I need help to decrypt my file with .lapoi extension...
  10. PUMA RANSOMWARE

    in AntiVirus, Firewalls and System Security
    PUMA RANSOMWARE: My friend is using Windows 10 Pro x64 version and got infected by Puma Ransomware. It encrypted all personal files with .pumas extension, windows defender was fully updated at that time but it was unable to protect from the ransomware. Is there any decryption tools? Help!...