Ransomware Virus Phobos

Question

My all files encrypted to .CALEB extension ( I'm want my files back) please help me out for this regards..???

Answer 1

Unfortunately, there does not exist a free way to decrypt files encrypted by Phobos Ransomware ....

Please read: https://www.bleepingcomputer.com/forums/t/708369/caleb-ransomware/#entry4907285

• https://www.bleepingcomputer.com/forums/t/708369/caleb-ransomware/#entry4907285
• https://www.bleepingcomputer.com/forums/t/688649/phobos-ransomware-phobos-phoenix-actin-actor-adage-adame-support/page-78#entry4963665

For all further questions and more info/help, please go here: https://www.bleepingcomputer.com/forums/t/688649/phobos-ransomware-phobos-phoenix-actin-actor-adage-adame-support/

==========

> https://blog.emsisoft.com/en/26164/how-to-remove-ransomware-the-right-way-a-step-by-step-guide/

> https://support.emsisoft.com/topic/29386-first-steps-when-dealing-with-ransomware/

> Ransomware Help & Tech Support Forum - BleepingComputer.com

> https://support.emsisoft.com/forum/83-help-my-files-are-encrypted/

Also suggestion to read (and if necessary do) everything here: 

• Best Defensive Strategy against ransomware (crypto malware)
• How ransomware spreads: 9 most common infection methods and how to stop them | Emsisoft | Security Blog
• Should you pay the ransom? - Reporting Ransomware

Answer 2

And another PS...

With regard to that company you've mentioned: Fast Data Recovery....

According to the posts by Michael Gillespie (@demonslay335 , known ransomware expert, connected to https://malwarehunterteam.com/ ), Fast Data Recovery might not be a good choice....

Please read: https://twitter.com/demonslay335/status/1194662643904241671

Answer 3

PS:

And - in case you can prove that you are working in an healthcare related business - you might want to read: https://www.bleepingcomputer.com/news/security/emsisoft-coveware-offer-free-ransomware-help-during-coronavirus-outbreak/

Answer 4

I'm very sorry but I'm not in the position to have more inside knowledge than the real experts such as  quietman over at the BleepingComputer site...

Please do read his comments on data recovery companies here: https://www.bleepingcomputer.com/forums/t/608858/id-ransomware-identify-what-ransomware-encrypted-your-files/?p=4841045

And, please, do as I already suggested in my earlier post:

For all further questions and more info/help, please go here: https://www.bleepingcomputer.com/forums/t/688649/phobos-ransomware-phobos-phoenix-actin-actor-adage-adame-support/

Best wishes for you...

Answer 5

Dear smeed

After my computer got infected. I have searched the internet to find a company that specializes in data recovery. Specifically: fastdatarecovery. They recovered.

But honestly, the price is too high. I can not afford.

The problem here, they have been decrypted. I do not believe it?