GehennaLocker勒索病毒家族详情
本帖最后由 Potato 于 2021-5-21 17:15 编辑【家族名】
Win32/Ransom.GehennaLocker
[平台] / [主类型].[家族名]
平台类型 :Win32 Win64
威胁类型 : Ransom
【是否支持解密】
360解密大师：暂不支持
在线解密：暂不支持
【被加密文件】
被加密文件后缀格式： 修改文件后缀为.gehenna
【勒索提示信息】：
文件名：GEHENNA-README-WARNING.html
文件内容 ：
-------------------------------------------------------------------------------
MESSAGE FROM GEHENNA LOCKER
We are a team of Cyber Experts .
We Penetrated Your Network .
We then Encrypted Almost All Computer Systems on Network.
All Files, Docs , Databases etc... are not damaged Just changed
Encrypted Files cannot be decrypted without our Decryption Service
As team of Cyber Experts , We offer free decryption of Encrypted Files not more 3mb
This Guarantee We can Decrypt All Your Network Files Encrypted
Contact us via::
ferrari@msgsafe.io
bannedlands@msgsafe.io
Cooperate with US ::
For early Decryption
We are still in Your Network
We have backdoored All Computers
Pay us We remove all backdoors & help Your protect Your Network From Similar Attacks.
PERSONAL ID::
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
Encrypted Computer System FILES Cannot be Restored without Our Decryption Service.
NO COOPERATION WITH ::
WE SELL ALL DOWNLOADED DATA , FILES, SECRETS.
LEAK IT ONLINE FREE OF CHARGE.
DISTRUPT,DDOS NETWORK SYSTEMS.
ALWAYS, WE LIVE IN YOUR SYSTEMS
-------------------------------------------------------------------------------
【防护建议】
1.多台机器，不要使用相同的账号和口令
2.登录口令要有足够的长度和复杂性，并定期更换登录口令
3.重要资料的共享文件夹应设置访问权限控制，并进行定期备份
4.定期检测系统和软件中的安全漏洞，及时打上补丁。
5.定期到服务器检查是否存在异常。查看范围包括：
a)是否有新增账户
b) Guest是否被启用
c) Windows系统日志是否存在异常
d)杀毒软件是否存在异常拦截情况
6.安装安全防护软件，并确保其正常运行。
7.从正规渠道下载安装软件。
8.对不熟悉的软件，如果已经被杀毒软件拦截查杀，不要添加信任继续运行。
页:
[1]