请教是不是中勒索病毒,有解吗 ?
作业系统:WIN 7 (目前还能正常开机)
中毒档案都会有副档名"ribbswkr":PDF, JPG (所有档案里,没有全都中。),WORD,
EXCEL,PPT,邮件pst…
例如:xxxxx.pdf.ribbskwr
xxxxx.jpg.ribbswkr
xxxxx.ppt.ribbswkr
另外在每个中毒档案的资料夹里,都有"README.TXT",其内容如下:
请问大大,档案有机会救回吗 ?
ALL YOUR DOCUMENTS PHOTOS DATABASES AND OTHER IMPORTANT FILES HAVE BEEN
ENCRYPTED!
====================================================================================================
Your files are NOT damaged! Your files are modified only. This modification
is reversible.
The only 1 way to decrypt your files is to receive the private key and
decryption program.
Any attempts to restore your files with the third party software will be
fatal for your files!
====================================================================================================
To receive the private key and decryption program follow the instructions
below:
1. Download "Tor Browser" from https://www.torproject.org/ and install it.
2. In the "Tor Browser" open your personal page here:
http://1y9m1w3g5q7a9k1u3e5.gvnthwjr3zipxntt.onion/ribbswkr
Note! This page is available via "Tor Browser" only.
====================================================================================================
Also you can use temporary addresses on your personal page without using
"Tor Browser":
http://1y9m1w3g5q7a9k1u3e5.beenmet.host/ribbswkr
http://1y9m1w3g5q7a9k1u3e5.lainhe.site/ribbswkr
http://1y9m1w3g5q7a9k1u3e5.gasadd.space/ribbswkr
http://1y9m1w3g5q7a9k1u3e5.trysad.pw/ribbswkr
Note! These are temporary addresses! They will be available for a limited
amount of time!