Recommended Posts

Files in My PC got affected with .help virus and i cant open the files. File names changed and have .help extension.
It looks like below
>>>
File format- FileName.file type.id[F0C2A07A-2275].[[email protected]].help
for example >>
Original FIle Name :  IMG_0112.JPG
After attack : IMG_0112.JPG.id[F0C2A07A-2275].[[email protected]].help
 
Appreciate your help to recover files. I lost  old memories of Family photographs & some documents due to this
 
Edited by GT500
Removed links.

Share this post


Link to post
Share on other sites

This appears to be Phonos. If that's the case, note that there's no way to decrypt files that have been encrypted by Phobos without paying the ransom.

You can verify this at ID Ransomware:
https://id-ransomware.malwarehunterteam.com/

You can paste a link to the results into a reply if you would like for me to review them.

Share this post


Link to post
Share on other sites

Yes, this is the result of Phobos Ransomware attack. The variant with this address has been known since March 2020.

Until now, none of the decryption specialists and anti-virus labs have reported that they are close to decryption. 
Therefore, if someone on the Internet offers you a decryption, then it will certainly be another scammer.

First let us know and we will check their "super-capabilities".

Share this post


Link to post
Share on other sites
On 7/18/2020 at 10:07 AM, Amigo-A said:

Yes, this is the result of Phobos Ransomware attack. The variant with this address has been known since March 2020.

Until now, none of the decryption specialists and anti-virus labs have reported that they are close to decryption. 
Therefore, if someone on the Internet offers you a decryption, then it will certainly be another scammer.

First let us know and we will check their "super-capabilities".

Hello theres,

any one knows if there was found a way to decrypt .help files?

Share this post


Link to post
Share on other sites
17 hours ago, Malaki said:

Hello theres,

any one knows if there was found a way to decrypt .help files?

There is no way to decrypt files that have been encrypted by Phobos without paying the ransom.

Share this post


Link to post
Share on other sites

Hi. A friend was attacked by Phobos too. I found this page offers a solution from GridinSoft, please tell me if it is reliable.

 

Edited by GT500
Removed link.

Share this post


Link to post
Share on other sites
3 hours ago, iaq66 said:

Hi. A friend was attacked by Phobos too. I found this page offers a solution from GridinSoft, please tell me if it is reliable.

That's not safe. Don't download it.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.