Faust virus

100Proof

Hello, despite of having Bitdefender installed all our data has been encrypted and now has the extension .faust. Is there in anyway a solution to remove this virus? Thank you in advance for your help.

Gjoksi

Hello.

Faust is a file-encrypting ransomware infection that restricts access to data (documents, images, videos) by encrypting files with the “.faust” extension. It then attempts to extort money from victims by asking for “ransom”, in the form of Bitcoin cryptocurrency, in exchange for access to data.

The Faust ransomware will scan your computer for images, videos, and important productivity documents and files such as .doc, .docx, .xls, .pdf. When these files are detected, the ransomware will encrypt them and change their extension to “.faust”, so that you are no longer able to be open them.

Once the Faust ransomware has encrypted the files on your computer, it will display a ransom note and instructions on how to contact the authors of this ransomware.

So, scan (and disinfect, if needed) your PC with Bitdefender Rescue Environment:

https://www.bitdefender.com/consumer/support/answer/29132/

You should also try the Bitdefender Ransomware Recognition Tool:

https://www.bitdefender.com/blog/labs/bitdefender-ransomware-recognition-tool/

and see if you can get the appropriate decryption tool, if it exists.

FInally, you could also contact Bitdefender Consumer Support by chat, telephone or e-mail:

https://www.bitdefender.com/consumer/support/help/

Chat is the fastest way to get in touch with Bitdefender Consumer Support.

Select: Prevention & Threat Removal -> Windows -> Threat Removal, click on Contact Support in the black box and then click on Chat 24/7.

NOTE: Bitdefender telephone support is not toll-free!

Regards.

Flexx

Additionally, there is no decryptor currently available that can decrypt your files encrypted with Faust ransomware. However, you can try contacting Dr.Web antimalware and sharing the samples they have requested. If they are able to decrypt the files, they will charge you a nominal fee for their services.You can visit the below stated link for the same.

https://support.drweb.com/new/free_unlocker/for_decode/

Regards

Alexandru_BD

Hello @100Proof,

I'm sorry to hear this..

A quick search over the internet revealed a guideline you can try (without any guarantees of success, of course):

https://malwaretips.com/blogs/remove-faust-ransomware-virus/

You can also get in touch with the Bitdefender Support teams for assistance and they will forward your inquiry to the anti-malware teams.

Let us know if you could get your files back.

Regards,

Alex