我电脑的好像中了加密病毒
请问该怎么救?只有重灌能完全清除病毒吗?
有备份档,但若直接放回电脑后会不会再度受感染?
有人知道KARRHZE档这是什么病毒?
电脑目前所有WORD档、EXCEL档、PDF档副档名都变成了KARRHZE档
如下:
https://imgur.com/98uraS6
然后都不能开
里面出现了一个README文件
文件翻译如下:
您的所有文件照片数据库和其他重要文件都已加密!
====================================================
====================================================
您的文件没有损坏!您的文件仅被修改。这种修改是可逆的。
解密文件的唯一方法是接收私钥和解密程序。
任何使用第三方软件恢复文件的尝试都会对您的文件造成致命影响!
====================================================
====================================================
要接收私钥和解密程序,请遵循以下说明:
1. 从 https://www.torproject.org/ 下载“Tor 浏览器”并安装它。
2. 在“Tor 浏览器”中打开您的个人页面:http:
//da70a6c85c147c1014karrhze.hqi4yxata3v5es3ocbniowfvbzcobro5s5ytk3dxn2rgjerjcjzjceid.onion/karrhze
注意!此页面仅可通过“Tor 浏览器”访问。
====================================================
====================================================
您也可以在您的个人页面上使用临时地址而不使用“Tor 浏览器”: http:
//da70a6c85c147c1014karrhze.sixtest.quest/karrhze
http://da70a6c85c147c1014karrhze.liecut.monster/karrhze
http://da70a6c85c147c1014karrhze.turnis.art/karrhze
http://da70a6c85c147c1014karrhze.diskwar.tech/karrhze注意!有临时地址!它们将
在有限的时间内可用!
原文:
ALL YOUR DOCUMENTS PHOTOS DATABASES AND OTHER IMPORTANT FILES HAVE BEEN
ENCRYPTED!
====================================================================================================
Your files are NOT damaged! Your files are modified only. This modification
is reversible.
The only 1 way to decrypt your files is to receive the private key and
decryption program.
Any attempts to restore your files with the third party software will be
fatal for your files!
====================================================================================================
To receive the private key and decryption program follow the instructions
below:
1. Download 'Tor Browser' from https://www.torproject.org/ and install it.
2. In the 'Tor Browser' open your personal page here:
http://da70a6c85c147c1014karrhze.hqi4yxata3v5es3ocbniowfvbzcobro5s5ytk3dxn2rgjerjcjzjceid.onion/karrhze
Note! This page is available via 'Tor Browser' only.
====================================================================================================
Also you can use temporary addresses on your personal page without using 'Tor
Browser':
http://da70a6c85c147c1014karrhze.sixtest.quest/karrhze
http://da70a6c85c147c1014karrhze.liecut.monster/karrhze
http://da70a6c85c147c1014karrhze.turnis.art/karrhze
http://da70a6c85c147c1014karrhze.diskwar.tech/karrhze
Note! There are temporary addresses! They will be available for a limited
amount of time!