zmfree 发表于 2025-6-30 18:39

中了勒索病毒,使用360的解密大师查不出来,所以来这里寻求帮助!

这个病毒除了对 DLL文件和EXE文件没有加密,其他的文本文件和打包文件都加密了,并留下了勒索信


      ########################################################################

      !!!!!!!!!!!!! THE FILES ON YOUR DEVICE HAVE BEEN ENCRYPTED !!!!!!!!!!!!!

      ########################################################################


      Due to a security breach, all files on your computer have been encrypted,

      for decryption, send an email to us: BaseData@airmail.cc


      Be sure to specify this ID in the header of the letter

      when contacting us: 8oEhcjYu


      To decrypt your files, you will need to pay a certain amount in bitcoins. The decryption rate depends on the speed of your contact with us.

      After payment, you will receive a special tool for decrypting files on your computer.


      #########################################

      As a guarantee, we make a free decryption

      #########################################

      For the test, we can decrypt one small file as proof of decryption.

      We do not decrypt important files during testing, such as XLS, databases and other important files!

      We don't consider ourselves criminals! We only show you the problems with your security and get rewarded for our hard work!

      We never cheat and value our reputation!


      #########################################

      How can I buy Bitcoins?

      #########################################

      Contact us and we will provide you with instructions for buying Bitcoin.

      Please note that by contacting third parties, the cost may increase due to additional fees.

      We will help you to purchase bitcoin without unnecessary difficulties, our experienced specialists will tell you in detail about the process.


      #########################################

      This is very important!

      #########################################

      - Do not rename encrypted files.

      - Do not try to decrypt your data using third party software, this may lead to irreversible data loss.

      - No one else will be able to return your files except us!


      #########################################################################

每个加密的文件后缀加了 .[].[[BaseData@airmail.cc]].wstop





这是2个加密和未加密的文件,有没有大神指导一下怎么解? 谢谢!!!

zmfree 发表于 2025-7-1 16:46

有没有 大神帮忙?

papa_微博 发表于 2025-7-1 18:35

需要进行溯源分析,排查中毒原因。请添加2880706404,并备注被加密文件后缀。
页: [1]
查看完整版本: 中了勒索病毒,使用360的解密大师查不出来,所以来这里寻求帮助!