Decryption of files encrypted to the extension .promos

[AV-Freak]

Dear Friends,

One of my customers got hit by a ransomware which had encrypted his files (Xlsx, JPG and Pdf) to a format named .promos.

i couldn't find much information regarding it. Can any of the members could share their valuable knowledge and expertise in recovering files. ?

Is it possible to recover the encrypted files ? Kindly let me know the possibilities.

Thank you.

 

[BoraMurdar]

I think that Michael may have the answer for your friend

STOP Ransomware (.STOP .Djvu, .Puma, .Promo) Support Topic - Ransomware Help & Tech Support

Page 1 of 807 - STOP Ransomware (.STOP .Djvu, .Puma, .Promo) Support Topic - posted in Ransomware Help & Tech Support: According to information previously posted on the Emsisoft Forum, they no longer have any method to decrypt STOP (DJVU) Ransomware unless the encryption occurred before the 29th...

www.bleepingcomputer.com

 

[LDogg]

Did your customer backup any data or use backup any System Images via solution such Macrium Reflect or Aomei Backupper?

There are free decryptors such as STOPDecrypter, however there's not going about .promos extension ransomware. I'd also educate your client about the importance of safe browsing practices and backing up important files. Hope some of this helps. '

~LDogg