Leejaw 0 Posted July 17, 2020 Share Posted July 17, 2020 Hi, I Have installed the Eset antivirus server edition in Server 2008R2 yesterday attacked by ransomware DEVOS extension. Is there any tool to decrypt that files. Thanks, Leejaw Dangol Link to comment Share on other sites More sharing options...
Administrators Marcos 5,231 Posted July 17, 2020 Administrators Share Posted July 17, 2020 It's FIlecoder.Phobos, however, files encrypted by this ransowmare cannot be decoded. Please make sure that you have ESET File Security 7.1 installed on the server. Protect settings with a password and also make sure that RDP is secured in case you cannot disable it completely. If you would like us to check the configuration of your system and ESET product, please email the following to samples[at]eset.com: - logs collected with ESET Log Collector (ESET must be installed, activated and running) - a handful of encrypted files - the ransomware note with payment instructions. Link to comment Share on other sites More sharing options...
Recommended Posts