xRatTeamThree勒索病毒家族详情
勒索病毒家族名称：xRatTeam Three Ransonware是否支持解密：否
详情：
被加密文件：
被加密文件后缀格式： 修改文件后缀为____xratteamLucked
勒索提示信息：
文件名：Como descriptografar os seus arquivos - How to decrypt your files.txt
文件内容 ：
-------------------------------------------------------------------------------
############################################################
################### xRatTeam Three Ransonware ####################
############################################################
########################## Aten玢o! ##########################
Todos seus arquivos foram criptografados. Utilizando criptografia RSA de 2048 bits.
Tornando imposs韛el a recupera玢o dos arquivos, sem a chave privada correta.
Caso haja interesse em obter est?chave, e recuperar seus arquivos
acesse o link: https://lrzsyr5w4zpslx3c.onion.to/ e informe sua chave p鷅lica
Link alternativo: https://lrzsyr5w4zpslx3c.onion
Para acessar o link alternativo ?obrigatorio utilizar o navegador TOR
disponiv閘 no link
https://www.torproject.org/dist/torbrowser/6.0.5/torbrowser-install-6.0.5_pt-PT.exe
Se sua escolha for de recuperar seus arquivos e entrar em contato conosco,
LEMBRE-SE da seguinte recomenda玢o:
- N鉶 utilizar nenhuma ferramenta para TENTAR reverter a criptografia.
Tal procedimento poder?danificar seus arquivos, tornando ileg韛eis,
mesmo ap髎 o processo de descriptografia.
Aguardamos seu contato.
########################## Attention! ###########################
All your files are encrypted. Using RSA 2048 bits.
Making it impossible to recover the files without the correct private key.
If you are interested in getting is key, and retrieve your files
visit the link: https://lrzsyr5w4zpslx3c.onion.to/ and enter your public key
Alternative link: //lrzsyr5w4zpslx3c.onion
To access the alternate link is mandatory to use the TOR browser
available here
https://www.torproject.org/dist/torbrowser/6.0.5/torbrowser-install-6.0.5_en-US.exe
If your choice is to recover your files and contact us,
REMEMBER the following recommendation:
- Do not use any tool to reverse the encryption.
This can damage your files, making it unreadable,
even after the decryption process.
We await your contact.
############################################################
Sua chave publica:
===================
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
===================
-------------------------------------------------------------------------------
防护建议：
1.多台机器，不要使用相同的账号和口令
2.登录口令要有足够的长度和复杂性，并定期更换登录口令
3.重要资料的共享文件夹应设置访问权限控制，并进行定期备份
4.定期检测系统和软件中的安全漏洞，及时打上补丁。
5.定期到服务器检查是否存在异常。查看范围包括：
a)是否有新增账户
b) Guest是否被启用
c) Windows系统日志是否存在异常
d)杀毒软件是否存在异常拦截情况
6.安装安全防护软件，并确保其正常运行。
7.从正规渠道下载安装软件。
8.对不熟悉的软件，如果已经被杀毒软件拦截查杀，不要添加信任继续运行。
页:
[1]