Phobos Ransomware/ .ADAME

[jufa]

yesterday[Windows 10 64 bit] when i start my computer its look weird i can’t open any Microsoft application and other most application on my systems some files are encrypted, my files extensions are changed to “.id[9AD7BFD9-2275].[checkcheck07@qq.com].Adame”. i can’t able open any of my files. then i checked startup items on task manager there is one ”.vbs” file is running then i disable the file and locate the path, it is on my user root folder with another one exe. i delete the both of the files and i search the file name on the registry and delete all related registry settings. and clear temp folder and %temp% folder

clear my startup items. mean while my  C drive 100% , D drive 30% and E drive 20% files are encrypted.

Then i search .ADAME extension on google i find out it is a Phobos Ransomware.

i try to find solution on  “NOMORERANSOM.ORG” but i can’t find any solution to recover the encrypted files. 

please help ASAP

[Berny]

Welcome on the Forum, please check this :

https://noransom.kaspersky.com/  (*)

https://www.kaspersky.com/blog/no-no-ransom/13364/ 

https://id-ransomware.malwarehunterteam.com/

 

(*) Also :  “Ask for the tech support (only for Kaspersky’s paid products customers)”

 

[Hyperlance]

Did you ever get this sorted?

 

[Berny]

@Hyperlance  If you got the same issue , please see the Post above your Post.

[Hyperlance]

Yes but has it ever been sorted?

[Berny]

@Hyperlance We can’t tell you more,  if you have a licensed Kaspersky product  please contact K-Lab Technical Support. 

[Hyperlance]

Ok done. Thank you.

 

[Shungk]

Can anyone confirm that the problem has been resolved??

I removed the ransomware but files remain encrypted.

 

 

[Berny]

files remain encrypted.

Welcome. Please see suggestion in 2ond Post above

[Flood and Flood's wife]

Hello @Shungk,

Welcome!

Have you requested assistance from Kaspersky Technical Support?

Thank you🙏

 

[Shungk]

Hello @Shungk,

Welcome!

Have you requested assistance from Kaspersky Technical Support?

Thank you🙏

 

Hi,  with requesting assistance as we speak thx

[Berny]

@Shungk Please continue with Tech Support, we can’t help you here