5月1日晚,大量win10电脑资料被加密,添加统一后缀{73ABA010-D928-47FD-7DCB-72284ABD03AA}.restorebackup。每个文件夹都有一个readme.txt的文件,安装了360的电脑速度比较快的基本只被添加了readme.txt,资料文件少量被加密(如log,png等文件),速度比较慢的,被加密文件相对较多(部分Excel word文件),没有安装360,靠微软自带杀毒的基本全被修改(包括excel word txt bpl frf osd 用友数据库文件SQLserver等等)。win11系统没有感染,win7系统部分没有感染,另一个网段的电脑也没有感染。希望早日出解密程序。
readme.txt内容:
YOUR FILES ARE ENCRYPTED
Your files, documents, photos, databases and other important files are encrypted.
You are not able to decrypt it by yourself! The only method of recovering files is to purchase an unique private key.
Only we can give you this key and only we can recover your files.
To be sure we have the decryptor and it works you can send an email:
RestoreBackup@cock.li and decrypt one file for free.
But this file should be of not valuable!
Do you really want to restore your files?
Write to email:
RestoreBackup@cock.li
Attention!
* Do not rename encrypted files.
* Do not try to decrypt your data using third party software, it may cause permanent data loss.
* Decryption of your files with the help of third parties may cause increased price (they add their fee to our) or you can become a victim of a scam.
* Do not contact the intermediary companies. Negotiate on your own. No one but us will be able to return the files to you. As evidence, we will offer to test your files. |
|
|
|
评论
直达楼层