helprecover[at]foxmail[dot]com - Techist - Tech Forum

Go Back   Techist - Tech Forum > Security | Computer, Devices, Software and Systems > Viruses, Spyware and Malware
Click Here to Login
Reply
 
Thread Tools Display Modes
 
Old 05-23-2020, 07:41 PM   #1 (permalink)
Grandfather of Techist

\_(ツ)_/
 
Trotter's Avatar
 
Join Date: Jan 2005
Location: The South
Posts: 31,765
Default helprecover[at]foxmail[dot]com

My wife's computer was just hit with this. I am currently trying to find how to remove and recover from it but there's just not a lot out there. From what I have gathered it is a form of Phobos. Anyone know anything helpful on this one?
__________________

__________________
CM Mastercase H500 / Corsair RM650 Modular / AMD Ryzen 5 3600X / SilverStone PF240 AiO Cooler
AsRock X570 Extreme4 WiFi AX / 4x8GB XPG Specrix RGB 3200MHz / PowerColor Red Devil Radeon RX 5700 XT 8GB
Samsung 970 EVO 250GB NVMe / Crucial P1 1TB NVMe / WD Blus 5000GB SSD / WD Blue 2TB
Win10 Pro x64 / Razer Mamaba Wireless / Tecware 87 Key Mechanical
3xSceptre E255B-1658A 24.5" 165Hz + NEC MultiSync LCD1970GX 19" (in 3+1 configuration)

R.I.P. Father Trotter ... 14 Nov 1945 - 4 Sept 2009
Trotter is offline   Reply With Quote
Old 05-24-2020, 02:36 AM   #2 (permalink)
i2D
i 2 D 2
 
i2D's Avatar
 
Join Date: Jan 2015
Location: Earth
Posts: 1,835
Default Re: helprecover[at]foxmail[dot]com

Quote:
Originally Posted by Trotter View Post
My wife's computer was just hit with this. I am currently trying to find how to remove and recover from it but there's just not a lot out there. From what I have gathered it is a form of Phobos. Anyone know anything helpful on this one?
Use this site, they collect decryption keys the FBI etc have gotten from arrests.

https://www.nomoreransom.org/en/index.html

Doesnt look they will have it though.

If you cannot decrypt, it is your choice to pay, keep in mind they may not provide the key, and also if they do, they will sell your details on the market as "payers" so you will be targeted more.

Mitigation - take local backup on external drive (disconnect after each backup) and cloud backups in future.

Or if you can budget, pay for ransomware protection (most paid AV's come with this now).
__________________

__________________
i2D is offline   Reply With Quote
Old 05-24-2020, 09:27 AM   #3 (permalink)
Grandfather of Techist

\_(ツ)_/
 
Trotter's Avatar
 
Join Date: Jan 2005
Location: The South
Posts: 31,765
Default Re: helprecover[at]foxmail[dot]com

I will give it a shot. No one is getting a damn thing from me, especially someone who does crap like this. I was in the process of setting her computer up as I replaced it and they hit while I was having lunch. Lesson learned, I guess.
__________________
CM Mastercase H500 / Corsair RM650 Modular / AMD Ryzen 5 3600X / SilverStone PF240 AiO Cooler
AsRock X570 Extreme4 WiFi AX / 4x8GB XPG Specrix RGB 3200MHz / PowerColor Red Devil Radeon RX 5700 XT 8GB
Samsung 970 EVO 250GB NVMe / Crucial P1 1TB NVMe / WD Blus 5000GB SSD / WD Blue 2TB
Win10 Pro x64 / Razer Mamaba Wireless / Tecware 87 Key Mechanical
3xSceptre E255B-1658A 24.5" 165Hz + NEC MultiSync LCD1970GX 19" (in 3+1 configuration)

R.I.P. Father Trotter ... 14 Nov 1945 - 4 Sept 2009
Trotter is offline   Reply With Quote
Old 05-24-2020, 06:19 PM   #4 (permalink)
Wizard Techie
 
Join Date: May 2011
Location: Great Lakes State
Posts: 3,577
Default Re: helprecover[at]foxmail[dot]com

Your kinda screwed for the time being....
Just back up the data or use another drive until somebody eventually finds a key. You can periodically check on line to see if anything new comes up for any decrypt keys
lookie over here:
https://www.bleepingcomputer.com/for...oxmailcomhelp/
FYI:
https://blog.malwarebytes.com/threat...os-ransomware/
__________________
Windows 10 .... It wants to be found and installed so it can be the one Operating System to rule us all.
Joe C is offline   Reply With Quote
Old 05-24-2020, 07:05 PM   #5 (permalink)
Grandfather of Techist

\_(ツ)_/
 
Trotter's Avatar
 
Join Date: Jan 2005
Location: The South
Posts: 31,765
Default Re: helprecover[at]foxmail[dot]com

Thanks, i2D and Joe. Looks like I will take her old drive and sequester it in a drawer in hope of someone finding a cure someday. The new drive and the flash drive will be wiped and formatted using GParted.

She can only stay pissed for so long, right?
__________________
CM Mastercase H500 / Corsair RM650 Modular / AMD Ryzen 5 3600X / SilverStone PF240 AiO Cooler
AsRock X570 Extreme4 WiFi AX / 4x8GB XPG Specrix RGB 3200MHz / PowerColor Red Devil Radeon RX 5700 XT 8GB
Samsung 970 EVO 250GB NVMe / Crucial P1 1TB NVMe / WD Blus 5000GB SSD / WD Blue 2TB
Win10 Pro x64 / Razer Mamaba Wireless / Tecware 87 Key Mechanical
3xSceptre E255B-1658A 24.5" 165Hz + NEC MultiSync LCD1970GX 19" (in 3+1 configuration)

R.I.P. Father Trotter ... 14 Nov 1945 - 4 Sept 2009
Trotter is offline   Reply With Quote
Old 05-24-2020, 07:17 PM   #6 (permalink)
Wizard Techie
 
Join Date: May 2011
Location: Great Lakes State
Posts: 3,577
Default Re: helprecover[at]foxmail[dot]com

Maybe a good Moscato wine might help with the loss?
Condolences.....
__________________
Windows 10 .... It wants to be found and installed so it can be the one Operating System to rule us all.
Joe C is offline   Reply With Quote
Old 05-25-2020, 09:45 AM   #7 (permalink)
True Techie
 
TechnoChicken's Avatar
 
Join Date: Apr 2020
Location: Orbiting Jupiter
Posts: 148
Default Re: helprecover[at]foxmail[dot]com

Quote:
Originally Posted by Trotter View Post

She can only stay pissed for so long, right?
... you never know
__________________
"The thing I like about Whiskey is that it looks like iced tea. And the thing I like about iced tea is that you can take it to work."-Kermit the Frog
TechnoChicken is offline   Reply With Quote
Old 05-25-2020, 03:38 PM   #8 (permalink)
True Techie
 
TechnoChicken's Avatar
 
Join Date: Apr 2020
Location: Orbiting Jupiter
Posts: 148
Default Re: helprecover[at]foxmail[dot]com

I should note that I am single
__________________
"The thing I like about Whiskey is that it looks like iced tea. And the thing I like about iced tea is that you can take it to work."-Kermit the Frog
TechnoChicken is offline   Reply With Quote
Old 05-25-2020, 03:51 PM   #9 (permalink)
i2D
i 2 D 2
 
i2D's Avatar
 
Join Date: Jan 2015
Location: Earth
Posts: 1,835
Default Re: helprecover[at]foxmail[dot]com

Quote:
Originally Posted by TechnoChicken View Post
I should note that I am single
Trotter is the owner of the site. He gonna ban yo *** lol
__________________
i2D is offline   Reply With Quote
Old 05-25-2020, 03:55 PM   #10 (permalink)
Grandfather of Techist

\_(ツ)_/
 
Trotter's Avatar
 
Join Date: Jan 2005
Location: The South
Posts: 31,765
Default

Quote:
Originally Posted by i2D View Post
Trotter is the owner of the site. He gonna ban yo *** lol
ROFLMAO. No, not the owner, just the chief keystone cop.

I broke the news to my wife and she took it rather well. She is hoping she can find a copy of her budget spreadsheet that isn't too far out of date as that is what is her main concern. Today I pulled the old drive and put it away, nuked the new M.2, and reinstalled Win10, Office, etc.

Quote:
Originally Posted by TechnoChicken View Post
I should note that I am single
Married 33.5 years so far.
__________________

__________________
CM Mastercase H500 / Corsair RM650 Modular / AMD Ryzen 5 3600X / SilverStone PF240 AiO Cooler
AsRock X570 Extreme4 WiFi AX / 4x8GB XPG Specrix RGB 3200MHz / PowerColor Red Devil Radeon RX 5700 XT 8GB
Samsung 970 EVO 250GB NVMe / Crucial P1 1TB NVMe / WD Blus 5000GB SSD / WD Blue 2TB
Win10 Pro x64 / Razer Mamaba Wireless / Tecware 87 Key Mechanical
3xSceptre E255B-1658A 24.5" 165Hz + NEC MultiSync LCD1970GX 19" (in 3+1 configuration)

R.I.P. Father Trotter ... 14 Nov 1945 - 4 Sept 2009
Trotter is offline   Reply With Quote
Reply

« Adware | - »
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Dot Dot dot? Vernong's was never honestly welcomed? veg1992 New Member Introductions 45 03-24-2008 07:22 PM
strange blue dot on desktop? blackmamba Microsoft Windows and Software 7 01-26-2005 06:09 AM
.20 vs. .25 dot pitch dbotennis Monitors, Printers and Peripherals 3 10-18-2004 12:13 PM
dot pitch GameGURU Monitors, Printers and Peripherals 22 08-30-2004 12:10 AM
Dot matrix printer piggysmile Monitors, Printers and Peripherals 4 11-17-2003 11:17 AM



All times are GMT -5. The time now is 09:54 PM.


Powered by vBulletin® Version 3.8.8 Beta 1
Copyright ©2000 - 2020, vBulletin Solutions, Inc.