gianni 0 Report post Posted December 11, 2019 I HAVE A PROBLEM TO DECRYPT MY FILE WITH FT CODE I ATTACH FILE INFECTED END INITIAL MESSAGE AND BELOW THE REQUEST COULD YOU HELP ME? Download Image FT. BARRY BARAK - GUINEE.xls.f5117c READ_ME_NOW.htm Quote Share this post Link to post Share on other sites
GT500 808 Report post Posted December 12, 2019 This is a PowerShell-based ransomware. In October they started distributing it in malicious Word documents via spam e-mails. There's more information at the following link:https://www.bleepingcomputer.com/news/security/ftcode-powershell-ransomware-resurfaces-in-spam-campaign/ Unfortunately I don't know of any way to decrypt files for free. The encryption method they use appears to be secure. I'll ask if there are any possibilities, however I don't expect any. Quote Share this post Link to post Share on other sites
Amigo-A 131 Report post Posted December 12, 2019 more precisely FTCode Ransomware or PowerShell Locker 2019 Quote Share this post Link to post Share on other sites
GT500 808 Report post Posted December 13, 2019 @gianni if you have the malicious file that caused the infection, would it be possible to upload it to VirusTotal and post a link to the analysis here? Quote Share this post Link to post Share on other sites
