Bhvy

Phobos Ransomware .help strain

Recommended Posts

Hi,
My personal laptop has been attacked by phobos ransomware with .help strain. My files has been encrypted, i'm looking forward for decryptor to unlock my files. Please find the file format: FileName.ext.id[ID].[[email protected]].help.
If someone has decrypted files from this strain, please guide me as well.
Thanks in advance!

Share this post


Link to post
Share on other sites

Would it be possible to attach an encrypted file and a copy of the ransom note to a reply?

Share this post


Link to post
Share on other sites
Hello! Today I was also caught. I've been researching and I can't find a solution.   
I will attach the information doc. asking for the ransom.
I appreciate all the help
All you files have been encrypted due to a security problem with your PC. If you want to restore them, there are two way of contact.

Mail contact - [email protected]
Jabber contact - 	[email protected] 

- https://www.wikihow.com/Create-a-Jabber-Account
- https://psi-im.org/download/
- Once you created a jabber account. Make sure you add the contact first and wait for our approval to begin sending message.
- Directly messaging us with out accepting your request will result to Forbidden message


Free decryption as guarantee

Before paying you can send us up to 5 files for free decryption. The total size of file must be less tthan 4mb(non achieved), and files should not contact valuable information. (databases, backups, large excel sheets, etc.)


Where to buy bitcoins? 

 * The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 
   'Buy bitcoins', and select the seller by payment method and price: 
   https://localbitcoins.com/buy_bitcoins 
 * Also you can find other places to buy Bitcoins and beginners guide here:   
   http://www.coindesk.com/information/how-can-i-buy-bitcoins 

Attention!   
 * Do not rename encrypted files. 
 * Do not try to decrypt your data using third party software, it may cause permanent data loss.  
 * Decryption of your files with the help of third parties may cause increased price  
   (they add their fee to our) or you can become a victim of a scam.  
All you files have been encrypted due to a security problem with your PC. If you want to restore them, there are two way of contact.

Mail contact - [email protected]
Jabber contact - 	[email protected] 

- https://www.wikihow.com/Create-a-Jabber-Account
- https://psi-im.org/download/
- Once you created a jabber account. Make sure you add the contact first and wait for our approval to begin sending message.
- Directly messaging us with out accepting your request will result to Forbidden message


Free decryption as guarantee

Before paying you can send us up to 5 files for free decryption. The total size of file must be less tthan 4mb(non achieved), and files should not contact valuable information. (databases, backups, large excel sheets, etc.)


Where to buy bitcoins? 

 * The easiest way to buy bitcoins is LocalBitcoins site. You have to register, click 
   'Buy bitcoins', and select the seller by payment method and price: 
   https://localbitcoins.com/buy_bitcoins 
 * Also you can find other places to buy Bitcoins and beginners guide here:   
   http://www.coindesk.com/information/how-can-i-buy-bitcoins 

Attention!   
 * Do not rename encrypted files. 
 * Do not try to decrypt your data using third party software, it may cause permanent data loss.  
 * Decryption of your files with the help of third parties may cause increased price  
   (they add their fee to our) or you can become a victim of a scam.  
 
 
 
 
 

info.txt info.hta

Share this post


Link to post
Share on other sites
5 hours ago, [email protected] said:

Hello! Today I was also caught. I've been researching and I can't find a solution. I will attach the information doc. asking for the ransom. I appreciate all the help

Unfortunately Phobos isn't decryptable.

Share this post


Link to post
Share on other sites

Good Morning. Forgetfulness had left an external drive connected to the PC, all the photos were gone. I'll wait ... there may be a solution any day. Thank you very much 👍

2 hours ago, GT500 said:

Unfortunately Phobos isn't decryptable.

 

Share this post


Link to post
Share on other sites

My recommendation is to make a backup of your encrypted files, that way if anyone ever releases a decrypter your files will be in a safe place.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.