robert.serwanga Posted July 27, 2019 Report Share Posted July 27, 2019 My Domain controller has been hit with 72A8AA7D.[[email protected]].harma and am seeking for some kind advise. Files are renamed to that extension Link to comment Share on other sites More sharing options...
Amigo-A Posted July 27, 2019 Report Share Posted July 27, 2019 Hello @robert.serwanga The format of the encrypted file indicates that it is Dharma Ransomware You can verify this yourself through the ID Ransomware service. I recommend that you attached the files of the ransom notes to your message. These may be files RETURN FILES.txt and Info.hta Link to comment Share on other sites More sharing options...
Recommended Posts