Recommended Posts

Files in My PC got affected with .help virus and i cant open the files. File names changed and have .help extension.
It looks like below
File format- FileName.file[F0C2A07A-2275].[[email protected]].help
for example >>
Original FIle Name :  IMG_0112.JPG
After attack :[F0C2A07A-2275].[[email protected]].help
Appreciate your help to recover files. I lost  old memories of Family photographs & some documents due to this
Edited by GT500
Removed links.

Share this post

Link to post
Share on other sites

This appears to be Phonos. If that's the case, note that there's no way to decrypt files that have been encrypted by Phobos without paying the ransom.

You can verify this at ID Ransomware:

You can paste a link to the results into a reply if you would like for me to review them.

Share this post

Link to post
Share on other sites

Yes, this is the result of Phobos Ransomware attack. The variant with this address has been known since March 2020.

Until now, none of the decryption specialists and anti-virus labs have reported that they are close to decryption. 
Therefore, if someone on the Internet offers you a decryption, then it will certainly be another scammer.

First let us know and we will check their "super-capabilities".

Share this post

Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    No registered users viewing this page.