Phobos - Ransomware named .HELP

[leoleys]

Hello !

 

It's been several hours now that I peeled all the old topics on the PHOBOS theme, and having found nothing less than 3 months I allow myself to re-open a topic.

Yesterday I realized that my computer was the victim of a Phobos ransomware, renaming all my files to .help, in addition to adding the contact address "helprecovery@foxmail.com".

Not having understood immediately, I performed a system restore on a backup point the day before. It obviously didn't work. However, I didn't get a pop-up explaining the terms of the ransom, and I can't find a txt file either. I would like to know if progress has appeared for data decryption ... Thank you in advance !!

[Berny]

@leoleys Welcome.

Please see this :

https://noransom.kaspersky.com/  (*)

https://www.kaspersky.com/blog/no-no-ransom/13364/ 

https://id-ransomware.malwarehunterteam.com/ 

(*) Also :  “Ask for the tech support (only for Kaspersky’s paid products customers)”