Royroyger 0 Report post Posted August 19, 2019 I received ransomware requiring me to write [email protected] with in 24 hours using he code 720AF1D2-2289 after 24 hours i was to email to [email protected] i was to send 5 files for free decryption, which i did not do. i was advised on how to buy bitcoins at https://localbitcoins.com/buy_bitcoins and for beginners the provided me with this webside http://www.coindesk.com/information/how-can-i-buy-bitcoins/ which i did not do the virus infected my back-up and my server. the files were converted to banjo. files written in javascript i believe my computer was taken off the network and a new ip address was given, at the moment it is off the network so iam unable to use it, to send any files to you. i have the computer in safe mode now. can you please help me Quote Share this post Link to post Share on other sites
Royroyger 0 Report post Posted August 19, 2019 also, some files were written to french in microsoft Quote Share this post Link to post Share on other sites
GT500 811 Report post Posted August 20, 2019 I recommend uploading a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with:https://id-ransomware.malwarehunterteam.com/ You can paste a link to the results into a reply if you would like for me to review them. Quote Share this post Link to post Share on other sites
Amigo-A 132 Report post Posted August 20, 2019 The result of the verification in the IDR will be as follows:Phobos Ransomware Quote Share this post Link to post Share on other sites
