robert.serwanga 0 Report post Posted July 27, 2019 My Domain controller has been hit with 72A8AA7D.[[email protected]].harma and am seeking for some kind advise. Files are renamed to that extension Quote Share this post Link to post Share on other sites
Amigo-A 135 Report post Posted July 27, 2019 Hello @robert.serwanga The format of the encrypted file indicates that it is Dharma Ransomware You can verify this yourself through the ID Ransomware service. I recommend that you attached the files of the ransom notes to your message. These may be files RETURN FILES.txt and Info.hta Quote Share this post Link to post Share on other sites
