.Redmat Virus Ransomware

[shabuj]

My full computer file has effected by .Redmat Virus Ransomware. C drive has cleaned but other three drive file can not open. All files extension name has changed. Have any solution regarding this problem. Thanks Shabuj

[Flood and Flood's wife]

Hello Shabuj, Welcome!

1. Kaspersky software version/s?
2. Operating system, version, build?
3. Are the 3 affected drives detachable?

Please let us know? Thanks!

[shabuj]

Please see the attached file.

[Flood and Flood's wife]

1. Kaspersky software version/s?
2. :white_check_mark:
3. Are the 3 affected drives detachable?

:thinking:

[shabuj]

Few times ago I have reboot my windows, for the reason currently not available any antivirus. Previously was installed Kaspersky Total Security (after effected). 3rd question I am not clear.

[Flood and Flood's wife]

Hello Shabuj, Please clarify, when the infection occurred was there any installed, active Kaspersky software?

1. If "yes", which Kaspersky software: names and versions?
2. If "no", at what point was Kaspersky software installed & which Kaspersky software: names and versions?
3. & "currently", there's no Kaspersky software installed - is that correct?
4. 3. = 9/06/19 you said "other three drive file can not open", what type of drives are the "other 3 drives"

[shabuj]

1. No
2. After effected I have download Kaspersky from this link https://www.kaspersky.com/downloads/thank-you/total-security-free-trial
3. Yes
4. My computer have four drive One for Windows (C Drive) and other D, E and F drives. D, E and F drive all type/format of files has rename with .redmat extention (biodata.dox.redmat). Can't open any files (jpg, ai, eps, png, gif, dox, etc.)

[Flood and Flood's wife]

& I guess you don't have backups of the 3 infected drives? https://noransom.kaspersky.com/faq-en/ - gives general information. There's KVRT, (personally) I'd contact Kaspersky experts (for advice) before using. To do so: zip one or two of the infected files in a password protected .zip folder, name the folder "possible .redmat infected": and submit to Kaspersky, https://my.kaspersky.com/techsupport#/requests/new asking for help.

1. If you've only got KTS free you may not have access to Technical Support:thinking:
2. Aparently, you can also ask for help: @ Kaspersky Club: https://kasperskyclub.com, need a login, if you haven't already got one.

There's quite a bit of "how to" info available, using any search engine...:thinking: Best regards!

[ThinkPadUser]

Michael Gillespie has developed a decryptor for Redmat https://twitter.com/demonslay335/status/1085795270368071681 This is hosted on the Bleeping Computers website: https://www.bleepingcomputer.com/forums/t/671473/stop-ransomware-stop-puma-djvu-promo-drume-help-support-topic/ I think this may be able to resolve your ransomware issue if Kaspersky support doesn't get back to you. Good Luck!