SensorsTechForum - How to Technology and PC Security Forum

PC Security and Protection => Malware Removal Questions and Guides => Topic started by: Joel_Jonasse on June 17, 2019, 01:18:14 pm

Title: Formated my PC after infected by .gerosan
Post by: Joel_Jonasse on June 17, 2019, 01:18:14 pm
Posted Today, 09:13 AM

Hi guys.

I'm new member and I've got a problem with my computer. I was browsing on internet and suddenly i saw all my files renamed with .gerosan at the end. As the files were not opening anymore, I thought maybe there was a problem with my operation system and I formated installing a new operation system.
Kind off, no file is opening. I also tried some programs to recover/ decrypt the files but I'm struggling.
Can someone help please? Thanks.
Title: Re: Formated my PC after infected by .gerosan
Post by: Execute on June 17, 2019, 04:21:47 pm
Posted Today, 09:13 AM

Hi guys.

I'm new member and I've got a problem with my computer. I was browsing on internet and suddenly i saw all my files renamed with .gerosan at the end. As the files were not opening anymore, I thought maybe there was a problem with my operation system and I formated installing a new operation system.
Kind off, no file is opening. I also tried some programs to recover/ decrypt the files but I'm struggling.
Can someone help please? Thanks.

This is the .gerosan Files Virus, part of the "STOP" Ransomware family.
You should remove any leftover files of the virus with an anti-malware tool.
Then, you should try the decryption tool for it.

For reference:
https://sensorstechforum.com/gerosan-files-virus-stop-remove/ (https://sensorstechforum.com/gerosan-files-virus-stop-remove/)
Decrypt Files of STOP Ransomware Article (https://sensorstechforum.com/decrypt-files-stop-ransomware/)

Know that the decryption tool might not be able to decrypt exactly your version of the virus.

Best of luck and
let us know how it went.