Have you been affected by the EKING ransomware?


Turn off or disconnect the computer from the network


Do not ever make contact with the cybercriminals


Do not pay the ransom requested for your data


Contact us immediately. We are active 24/7 Worldwide

Don't Panic!​

EKING / PHOBOS ransomware is an encryption ransomware Trojan that was first observed on October 21, 2017 (a new variant of Dharma ransomware).

It is a malicious program classified as ransomware (aka malware).

Cybercriminals encrypt your files, blocking you from accessing them. They then demand you pay a ransom to access a decryption tool to recover your files.

Once you pay the ransom, the cybercriminals rarely send the decryption tool. In most cases, the perpetrator blocks its email or makes further ransomware demands.

EKING ransomware creates a text file called “YOUR FILES ARE ENCRYPTED.txt”, “Files Encrypted.txt” “info.txt” and displays a ransom note in a pop-up window.

This ransomware also renames all encrypted files by adding the “.EKING” extension (together with the victim’s ID and the .EKINGhacker email address).

For example, if a file is named “1.jpg“, then .EKING will rename it to “1.jpg.id-1E857D00-1234.[hacker@email.com].EKING”.

Help Ransomware is the only company that guarantees the full ransomware recovery of your data.


Click below to submit your case and files for evaluation.


Depending on the evaluation you have selected, we will commence analyzing your files to determine the cost associated with recovery.

*Please note that the evaluation cost will be deducted from your quote.

*We only provide a quote if you need a sample file, and a fee may apply. We may not produce a sample file for some variants unless a full recovery is performed.

If you choose for FREE Evaluation, you will receive your quote within 4-10 days.


Upon completing the evaluation, a quote will be sent to you with the associated cost to recover your data.

*We can determine the actual cost after analyzing your files.

*More than 90% of jobs are recovered within 24-48 hours, and more complex cases may take longer.

*We will start the ransomware recovery process immediately after payment.

We protect you with our No Data = No Charge policy for your data recovery.


Once you accept the quote, an email will be sent to you with a REMOTE ACCESS AND PRE-RECOVERY CHECKLIST to prepare your system for recovery.

Once you accept the quote, an email will be sent to you with a REMOTE ACCESS AND PRE-RECOVERY CHECKLIST to prepare your system for recovery.

All recoveries are made directly on your system. No Data will be taken offsite.

We will keep you updated throughout the recovery process, and we are contactable 24/7 for your convenience.


Why Choose Us

We've more than 25 years of experience in Ransomware Removal and Computer Security
We guarantee the recovery of all files on archives or the devolución of su dinero.
We guarantee the recovery of all files on archives or the refund of your money
We have successfully recovered data from all EKING ransomware variants
Because we understand the urgency of our clients, we have 24/7 worldwide attention

28 years of experience in cybersecurity

Worldwide support and 24/7 service

All types of cybersecurity services

# 1 in the global cybersecurity market

100% effective in file recovery

100% guaranteed service or money back

free assessment of ransomware attack

Fast and effective recovery services

qualified and certified cybersecurity experts


What to do

1. Fill in the form by compiling all the fields and describing the problem​.

2. Attach a .zip or .rar file of 5-10 samples of the encrypted files, no larger than 1Mb, and with the ransom note (.txt or .html)​.

3. Press the "SEND" button, and one of our experts will contact you as soon as possible.

“Our team deals with sensitive data, and our customers trust us to keep it all secure. We trusted Help Ransomware because we can’t afford any data loss or outage.”

Samantha Jane
Lark Productions
“When we contacted Help Ransomware, we had just been hit with a major security attack. They took immediate action and had our systems back online within hours.”

Jake Warren
GM Studios
“We had worked with other security firms before, but it was clear from the outset that Help Ransomware would have been different. The results speak for themselves.”

Kim Smith
Squant Media

Guaranteed Ransomware Removal
Fast Recovery of your Data 24/7