勒索病毒溯源问题，谁能搞定？

gfd534

scktsrvr - 快捷方式.lnk.bixi


反复被攻击  很烦恼，

ATTENTION! YOUR FILES WERE ENCRYPTED!
Don’t worry, your files are safe, provided that you are willing to pay the ransom.
- Don't rename encrypted files.
- Don't change encrypted files.
- Don't use third party software.
It will damage your files, you will lost any chance to recover it.
The only way to decrypt your files safely is to buy the special decryption software from us.
We can decrypt a couple of files as guarantee. The size of each file must be not more than 2Mb.
No database files for test.
Send pictures, text, doc files.
You can contact us with the following email

wuguireco@gmail.com
wuguireco@cock.li

Send us this ID or this !_INFO.txt in first email

ID: XXXXXXXXXXXXXXXXXXXXXXXXXXX

ixc1227

提交给360啊。它不允许有别的病毒存在的。

monkey125

反复被攻击你不从你们自己这边找下漏洞吗？

aping_luo

ixc1227 发表于 2024-9-4 10:51
提交给360啊。它不允许有别的病毒存在的。

以毒攻毒

ling11052001

怪不得老外技术牛，他们容易看得懂。咱除了单个字，组合后确实看不懂啊

995511

怎么会被盯上的呢？财富露白了？

wgm468

这是个人电脑吗？以前中过熊·猫烧香，格了盘抢救了部分文件。

南郭巍奕

这个是我的知识盲区了

gfd534

wgm468 发表于 2024-9-4 12:34
这是个人电脑吗？以前中过熊·猫烧香，格了盘抢救了部分文件。

        ########################################################################

        !!!!!!!!!!!!! THE FILES ON YOUR DEVICE HAVE BEEN ENCRYPTED !!!!!!!!!!!!!

        ########################################################################


        Due to a security breach, all files on your computer have been encrypted,

        for decryption, send an email to us: dataserver@airmail.cc


        Be sure to specify this ID in the header of the letter

        when contacting us: 9NobG4pT


        To decrypt your files, you will need to pay a certain amount in bitcoins. The decryption rate depends on the speed of your contact with us.

        After payment, you will receive a special tool for decrypting files on your computer.


        #########################################

        As a guarantee, we make a free decryption

        #########################################

        For the test, we can decrypt one small file as proof of decryption.

        We do not decrypt important files during testing, such as XLS, databases and other important files!

        We don't consider ourselves criminals! We only show you the problems with your security and get rewarded for our hard work!

        We never cheat and value our reputation!


        #########################################

        How can I buy Bitcoins?

        #########################################

        Contact us and we will provide you with instructions for buying Bitcoin.

        Please note that by contacting third parties, the cost may increase due to additional fees.

        We will help you to purchase bitcoin without unnecessary difficulties, our experienced specialists will tell you in detail about the process.


        #########################################

        This is very important!

        #########################################

        - Do not rename encrypted files.

        - Do not try to decrypt your data using third party software, this may lead to irreversible data loss.

        - No one else will be able to return your files except us!


        #########################################################################


        

r16176767

wuguireco@gmail.com
我今天也是被这个邮箱勒索了，楼主反复被搞，是咋解决的呀

sdfwssf

文件被加密了，悲剧