[求救] 疑似中了勒索病毒问题请教。

楼主: Jazzwei (这就是人参)   2020-12-09 12:49:07
中毒电脑作业系统为Windows server 2016
还好有做备援所以没有立即造成太大伤害
发生后也估狗想了解这一支病毒的特性
看是否能进行防范
用关键字估狗不到任何跟有相关的病毒资讯
档案加密后副档名多了cring
留下一个档名为deReadME!!!的记事本,内容为:
Oops, your computer is encrypted. Don’t panic. You will be able to recover
your important files through the decryption service, but you need to pay a
different fee. You must contact us by email. If we don’t receive the
decryption request within a week, we may no longer Provide services
Contact: [email protected]
此主机没有对外IP,无开网芳,也有控管登入帐号。
也有检查过其他主机无任何异常。
想请教诸位看此状况能否提供一些建议,
让小弟比较有方向可以找出哪里出现漏洞?
先感谢
作者: chang0206 (Eric Chang)   2020-12-09 13:50:00
net view hostname 看一下?不能连internet ? LAN 里面感染的机率比较大

Links booklink

Contact Us: admin [ a t ] ucptt.com