Jump to content

Phobos Ransomware/ .ADAME

Recommended Posts

yesterday[Windows 10 64 bit] when i start my computer its look weird i can’t open any Microsoft application and other most application on my systems some files are encrypted, my files extensions are changed to “.id[9AD7BFD9-2275].[checkcheck07@qq.com].Adame”. i can’t able open any of my files. then i checked startup items on task manager there is one ”.vbs” file is running then i disable the file and locate the path, it is on my user root folder with another one exe. i delete the both of the files and i search the file name on the registry and delete all related registry settings. and clear temp folder and %temp% folder

clear my startup items. mean while my  C drive 100% , D drive 30% and E drive 20% files are encrypted.

Then i search .ADAME extension on google i find out it is a Phobos Ransomware.

i try to find solution on  “NOMORERANSOM.ORG” but i can’t find any solution to recover the encrypted files. 

please help ASAP

Link to comment
Share on other sites

  • 1 month later...
  • 1 month later...

Please sign in to comment

You will be able to leave a comment after signing in

Sign In Now

  • Create New...