• Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

MyAntiSpyware

Menu
  • Downloads
  • Threats
    • Adware
    • Browser Hijacking
    • Phishing
    • Ransomware
  • Questions and Answers
  • Recover Encrypted Files
  • Free Malware Removal Tools

Ponce.lorena@aol.com ransomware. Recover Encrypted Files.

Myantispyware team December 19, 2019    

Ponce.lorena@aol.com is an email address that cyber criminals use to contact victims of new GlobeImposter ransomware variant. Ransomware is a type of malware that blocks access to files by encrypting them, until the victim pays a ransom.

Ponce.lorena@aol.com ransomware

Ponce.lorena@aol.com virus locks up the files using strong encryption method, that makes it impossible to unlock the encrypted data by the victim without obtaining a key and a decryptor, which is the only way to decrypt affected files. It can be obtained only in the case of payment of the required ransom through cryptocurrency wallet. The ransomware virus encrypts almost of database, videos, documents, music, web application-related files, archives and images, including common as:

.asset, .bar, .itdb, .zw, .bay, .yal, .wn, .mpqge, .pptx, .docm, .crt, .das, .psk, .p7c, .gdb, .odc, .odm, .1, .forge, .zabw, .wbz, .x3f, .pst, .sis, .kdc, .hkdb, .jpe, .sum, .raw, .wps, .wp6, .ptx, .pdf, .cfr, .map, .z3d, .y, .xls, .crw, .ncf, .1st, .xlsb, .wp, .ybk, .gho, .accdb, .z, .png, .sid, .xlsx, .zdb, .webp, .js, .xml, .wsd, .snx, .wdb, .ysp, .wma, .iwi, .x, .wbm, .layout, .ppt, .vcf, .dxg, .hkx, .css, .xx, .litemod, .raf, .dcr, .wbk, .dba, .vpp_pc, wallet, .der, .x3f, .lrf, .sql, .csv, .wm, .wmo, .wp4, .rtf, .epk, .wpg, .srf, .xpm, .wmv, .r3d, .xwp, .wotreplay, .eps, .jpeg, .xy3, .mrwref, .psd, .wp7, .sidd, .vpk, .wmd, .zif, .xyp, .xls, .mddata, .zi, .xbdoc, .3dm, .wbmp, .w3x, .xf, .bc6, .p7b, .dazip, .3fr, .qdf, .arch00, .wot, .txt, .odt, .wpe, .vfs0, .mef, .fpk, .xlsm, .apk, .rar, .wpa, .zdc, .orf, .srw, .xmmap, .xlsm, .m4a, .arw, .dmp, .wpw, .xdl, .mcmeta, .fsh, .rofl, .re4, .m2, .esm, .0, .doc, .qic, .tax, .2bp, .mlx, .ai, .pfx, .wcf, .wpb, .svg, .xar, .rgss3a, .rim, .upk, .xlk, .x3d, .bik, .sb, .ztmp, .wav, .db0, .wri, .bsa, .ws, .vdf, .icxs, .fos, .rwl, .wma, .rw2, .xyw, .big, .cer, .hplg, .wbd, .pkpass, .wp5, .xll, .wpd, .odb, .mdf, .desc, .dwg, .jpg, .mdb, .kdb, .mp4, .sav, .itm, .m3u, .wpl, .3ds, .wmv, .bc7, .odp, .dng, .vtf, .ff, .mov, .wpd, .ltx, .cdr, .mdbackup, .kf, .wb2, .webdoc, .bkp, .ods, .sidn, .pdd, .flv, .xdb, .sr2, .wire, .wbc, .nrw, .pef, .yml, .t12, .wpt

With the encryption process is finished, all encrypted files will now have a new extension appended to them. In every directory where there are encrypted files, Ponce.lorena@aol.com virus drops a file called ‘HOW_RECOVER.html’. This file contains a ransom note that is written in the English. The ransom message directs victims to make payment in exchange for a key needed to unlock personal files.

Summary

Email address Ponce.lorena@aol.com
Related ransomware GlobeImposter family
Encrypted Files Extension .[ponce.lorena@aol.com]
Ransom note HOW_RECOVER.html
Ransom amount $300 – $1000
Removal Free Malware Removal Tools
Recover Encrypted files How to recover ransomware encrypted files

 

Text presented in the ransom demand message:

YOUR FILES ARE ENCRYPTED!
TO DECRYPT, FOLLOW THE INSTRUCTIONS BELOW.

To recover data you need decryptor.
To get the decryptor you should:
Send 1 crypted test image or text file or document to ponce.lorena@aol.com
In the letter include your personal ID (look at the beginning of this document).

We will give you the decrypted file and assign the price for decryption all files
After we send you instruction how to pay for decrypt and after payment you will receive a decryptor and instructions We can decrypt one file in quality the evidence that we have the decoder.
MOST IMPORTANT!!!

Do not contact other services that promise to decrypt your files, this is fraud on their part! They will buy a decoder from us, and you will pay more for his services. No one, except ponce.lorena@aol.com, will decrypt your files.

Only ponce.lorena@aol.com can decrypt your files
Do not trust anyone besides ponce.lorena@aol.com
Antivirus programs can delete this document and you can not contact us later.
Attempts to self-decrypting files will result in the loss of your data
Decoders other users are not compatible with your data, because each user’s unique encryption key

How to recover .[ponce.lorena@aol.com] files

Unfortunately, at the moment it is impossible to decrypt .[ponce.lorena@aol.com] files, but do not despair. Fortunately, there are several alternative methods that can allow everyone to recover the contents of encrypted files. Each of these methods does not involve the use of special knowledge and paid programs and can be performed by everyone. We have prepared an instruction with illustrations, which describes in detail the process of data recovery. Before you begin data recovery, check your computer for malware using free malware removal tools. You must be 100% sure that ponce.lorena@aol.com virus is completely removed.

  1. Recover encrypted files from Volume shadow copies
  2. Recover encrypted files using Photo Rec
Ransomware

 Previous Post

How to remove Find-soulmates.com pop-ups (Virus removal guide)

Next Post 

How to remove Yellowlabeltokyo.com pop-ups (Virus removal guide)

Author: Myantispyware team

Myantispyware is an information security website created in 2004. Our content is written in collaboration with Cyber Security specialists, IT experts, under the direction of Patrik Holder and Valeri Tchmych, founders of Myantispyware.com.

Leave a Reply Cancel reply

New Guides

Split Max AC Reviews, Scam or Legit, Uncovering the Truth!
Nusayin Cooling Ace Review: Scam or Legit? What You Need to Know
Imwing Cooling Ace Reviews, Scam or Legit, Uncovering the Truth!
How to remove Amencest.co.in pop-up ads
scam alert
Don’t Get Tricked by GEROLAX.com: The Bitcoin Promo Code Scam

Follow Us

Search

Useful Guides

DNSChanger
How to remove DNSChanger malware virus [Updated Apr. 2018]
remove chrome extension
How to remove Chrome extensions installed by enterprise policy
Tech Support Scam
Remove Tech Support Scam pop-up virus [Microsoft & Apple Scam]
How to reset Mozilla Firefox (Updated Apr. 2018)
Files encrypted by ransomware become useless
How To Recover Encrypted Files (Ransomware file recovery)

Recent Guides

Find-soulmates.com
How to remove Find-soulmates.com pop-ups (Virus removal guide)
Ormalsciple.info
How to remove Ormalsciple.info pop-ups (Virus removal guide)
Expectivepo.info
How to remove Expectivepo.info pop-ups (Virus removal guide)
search.landslidesearch.com
How to remove Search.landslidesearch.com (Mac Virus removal guide)
Message-alert.info
How to remove Message-alert.info pop-ups (Virus removal guide)

Myantispyware.com

Myantispyware has been a trusted source for computer security and technology advice since 2004. Our mission is to provide reliable tech guidance and expert, practical solutions to help you stay safe online and protect your digital life.

Social Links

Pages

About Us
Contact Us
Privacy Policy

Copyright © 2004 - 2024 MASW - Myantispyware.com.