You are welcome to discuss various security topics with our professional team and other users like you!
Read our Registration Agreement and create your FREE account here!

*

Joel_Jonasse

  • *
  • 1
  • +0/-0
      • View Profile
Formated my PC after infected by .gerosan
« on: June 17, 2019, 01:18:14 pm »
Posted Today, 09:13 AM

Hi guys.

I'm new member and I've got a problem with my computer. I was browsing on internet and suddenly i saw all my files renamed with .gerosan at the end. As the files were not opening anymore, I thought maybe there was a problem with my operation system and I formated installing a new operation system.
Kind off, no file is opening. I also tried some programs to recover/ decrypt the files but I'm struggling.
Can someone help please? Thanks.

*

Execute

  • *****
  • 388
  • +55/-0
  • Your friendly neighbourhood IT guy
      • View Profile
Re: Formated my PC after infected by .gerosan
« Reply #1 on: June 17, 2019, 04:21:47 pm »
Posted Today, 09:13 AM

Hi guys.

I'm new member and I've got a problem with my computer. I was browsing on internet and suddenly i saw all my files renamed with .gerosan at the end. As the files were not opening anymore, I thought maybe there was a problem with my operation system and I formated installing a new operation system.
Kind off, no file is opening. I also tried some programs to recover/ decrypt the files but I'm struggling.
Can someone help please? Thanks.

This is the .gerosan Files Virus, part of the "STOP" Ransomware family.
You should remove any leftover files of the virus with an anti-malware tool.
Then, you should try the decryption tool for it.

For reference:
https://sensorstechforum.com/gerosan-files-virus-stop-remove/
Decrypt Files of STOP Ransomware Article

Know that the decryption tool might not be able to decrypt exactly your version of the virus.

Best of luck and
let us know how it went.