.RUMBA File Extension
RUMBA Ransomware Encrypted File
2.0 | 1 Vote
What is a RUMBA file?
A RUMBA file is a normal file, such as a document, image, or video, that has been renamed and encrypted by RUMBA ransomware. Because the file is encrypted and being held hostage, you cannot open it. Typically, the .rumba extension is added to the file's normal extension, producing a file whose name ends in an extension like .jpg.rumba.
Ransomware is a category of malicious programs that encrypt or otherwise prevent a user from accessing files before producing a ransom note. The ransom note details how the user can pay to unlock their files. STOP ransomware, which encrypts a user's files and then produces a plain text ransom note named _readme.txt, is one of the most common types of ransomware.
In January 2019, some PC users reported their computers had been infected by a new variant of STOP, which appended encrypted files with the .rumba extension. The RUMBA variant of STOP encrypts users' files using an offline encryption key, which means users can likely decrypt the files themselves using the Emsisoft Decryptor for STOP Djvu (linked below).
How did my computer get infected by RUMBA ransomware?
RUMBA ransomware is most commonly distributed in programs that appear to be legitimate but are actually adware and malware bundles. If you recently downloaded and installed an unverified program, that may be how RUMBA ransomware infected your computer.
NOTE: To learn more about STOP ransomware and its variants, refer to the .STOP entry.
How to open a RUMBA file
Because RUMBA files have been encrypted by ransomware, you cannot open them as you would normally. However, you can attempt to decrypt your RUMBA files using Emsisoft Decryptor for STOP Djvu. Read the instructions at the program's website carefully before attempting to decrypt your RUMBA files.
FileInfo.com recommends you never pay a ransom to decrypt files encrypted by ransomware. Paying a ransom encourages ransomware distributors to continue their efforts, and there is no guarantee that paying a ransom will give you access to your files. Instead, you should restore your data from a recent backup created before the ransomware infected your computer.