Ransomware

[Jamaican]

Malware bytes did not prevent my client from getting ransomware on their server protection did not work 

[KDawg]

Thank you for reaching out to us about your ransomware issue. We understand how frustrating it is to deal with an infection.

Malwarebytes does not offer any decryption tools or ransomware removal services. To clean your computers, you should restore from a backup or reinstall your operating system from scratch.

Here are some third-party website resources to assist you.

• ID Ransomware may help you identify the type of ransomware that has infected your computer. 
  https://id-ransomware.malwarehunterteam.com/

• No More Ransom provides tools that may help you decrypt files that are infected by specific ransomware.
  https://www.nomoreransom.org/en/decryption-tools.html

What version of Malwarebytes was the client using when this occurred?

We usually are able to stop most Ransom activity with our Anti-Ransomware module as well as other layers that help prevent it ever getting to this point.

Are the file on the server actually encrypted?

Just based on the image of the note looks similar to CryptoLocker, any idea what date this occurred on the system?

 

 

Edited July 23, 2019 by KDawg