Amnesia勒索病毒家族详情

勒索病毒家族名称：Amnesia勒索病毒家族
是否支持解密：暂时无法解密
详情：
被加密文件：
被加密文件后缀格式：

勒索提示信息：
文件名：HOW TO RECOVER ENCRYPTED FILES.TXT
文件内容 ：
-------------------------------------------------------------------------------
====================================================================================================
Your files are encrypted!

Your personal ID:

4518453509078134082044992974016054013791218806934937208661622781420912384419310542289076560721428831
9549427757390652429588611674942536507475918818698829261776408875397016335204378766947083572674624881
7733411781977417413747266827506177125544144354475143278822169910317478928616584094948863812093474431
0522738606554872617183744444107287242075690209843966265545374600533387100881822053592829509552590947
4782392188585620067547296409616106271184272213013934959620023604050215178733204218323827411542514346
9202328027002103399473952868674618648203762814175303486534635236597193833065732462856822221847667377
02828515223162403

Your documents, photos, databases and other important files have been encrypted.
Data recovery is required interpreter.

To get interpreter should send an email to infocrypt@mail.com . In a letter to indicate your
personal identifier (cm. at the beginning of this document).

If the contact is not obtained through the mail

* Sign up online http://bitmsg.me (online service for sending Bitmessage)
* Send an email to BM-2cVPjWMtfTRKJh4HsP87xxKHKy42dc8JXb indicating your address and personal identity

Next, you need to pay for the interpreter. In a response letter you receive an
address Bitcoin-Wallets, which must perform the transfer of funds in the amount of 0.19 Bitcoin
(0.19 BTC ~ 450 EUR).


If you have no Bitcoin

* Create a wallet Bitcoin: https://blockchain.info/wallet/#/signup
* Get cryptocurrency Bitcoin:
   https://localbitcoins.com/buy_bitcoins (Visa/MasterCard and etc.)
   https://btcdirect.eu/en-gb  (Visa/MasterCard and etc.)
   https://en.bitcoin.it/wiki/Buying_Bitcoins_(the_newbie_version)   (instruction for beginners)
* Send 0.19 BTC at the address specified in the letter

When the transfer is confirmed, you will get the decryption files for your computer.
After start-interpreter program, all your files will be restored.

Attention!

* Do not attempt to remove the program or run the anti-virus tools
* Attempts self-decrypting files will result in the loss of your data
* Decoders are not compatible with other users of your data, because each use`s unique encryption key
====================================================================================================
-------------------------------------------------------------------------------
防护建议：
1.多台机器，不要使用相同的账号和口令
2.登录口令要有足够的长度和复杂性，并定期更换登录口令
3.重要资料的共享文件夹应设置访问权限控制，并进行定期备份
4.定期检测系统和软件中的安全漏洞，及时打上补丁。
5.定期到服务器检查是否存在异常。查看范围包括：
a)是否有新增账户
b) Guest是否被启用
c) Windows系统日志是否存在异常
d)杀毒软件是否存在异常拦截情况
6.安装安全防护软件，并确保其正常运行。
7.从正规渠道下载安装软件。
8.对不熟悉的软件，如果已经被杀毒软件拦截查杀，不要添加信任继续运行。

家族：Amnesia
被加密文件后缀:son
黑客邮箱：byd@india.com

家族：Amnesia
被加密文件后缀:locked
黑客邮箱：Help244@Ya.RU

家族：Amnesia
被加密文件后缀:Amnesia
黑客邮箱：s1an1er111@protonmail.com

家族：Amnesia
被加密文件后缀:LOCKED
黑客邮箱/Url：Help244@Yandex.ru

家族：Amnesia
被加密文件后缀:LOCKED
黑客邮箱/Url：natali_bond90@inbox.ru

家族：Amnesia
被加密文件后缀:bagi
黑客邮箱/Url：vapeefiles@aol.com.

家族：Amnesia
被加密文件后缀:oled
黑客邮箱/Url：black.mirror@qq.com

家族：Amnesia
被加密文件后缀:LOCKED
黑客邮箱/Url：Help244@Yandex.ru

家族：Amnesia
被加密文件后缀:LOCKED
黑客邮箱/Url：natali_bond90@inbox.ru

家族：Amnesia
被加密文件后缀:bagi
黑客邮箱/Url：vapeefiles@aol.com.

家族：Amnesia
被加密文件后缀:oled
黑客邮箱/Url：black.mirror@qq.com

家族：Amnesia
被加密文件后缀:good
黑客邮箱/Url：protomolecule@gmx.com

家族：Amnesia
被加密文件后缀:good
黑客邮箱/Url：16zdcLFmC42mEXLWgPSgHsgYJbJ8bZiWze

家族：Amnesia
被加密文件后缀:makb
黑客邮箱/Url：makbigfast@india.com

家族：Amnesia
被加密文件后缀:FIXI
黑客邮箱/Url：happydaayz@aol.com

家族：Amnesia
被加密文件后缀:FIXI
黑客邮箱/Url：strongman@india.com

家族：Amnesia
被加密文件后缀:good
黑客邮箱/Url：protomolecule@gmx.com

家族：Amnesia
被加密文件后缀:good
黑客邮箱/Url：16zdcLFmC42mEXLWgPSgHsgYJbJ8bZiWze

家族：Amnesia
被加密文件后缀:makb
黑客邮箱/Url：makbigfast@india.com

家族：Amnesia
被加密文件后缀:FIXI
黑客邮箱/Url：happydaayz@aol.com

家族：Amnesia
被加密文件后缀:FIXI
黑客邮箱/Url：strongman@india.com

家族：Amnesia
被加密文件后缀:good
黑客邮箱/Url：protomolecule@gmx.com

家族：Amnesia
被加密文件后缀:good
黑客邮箱/Url：16zdcLFmC42mEXLWgPSgHsgYJbJ8bZiWze

家族：Amnesia
被加密文件后缀:makb
黑客邮箱/Url：makbigfast@india.com

家族：Amnesia
被加密文件后缀:FIXI
黑客邮箱/Url：happydaayz@aol.com

家族：Amnesia
被加密文件后缀:FIXI
黑客邮箱/Url：strongman@india.com

====================================================================================================
                         ____     _        _____    _____     ____     _
                        /  __|_  / |____  / ___ \  |  ___\   / __ \   / |____
                        \_____/  \_____/  \_____/  |_____/  /______\  \_____/

                          ______  ______  __  __  _____  _____  _____  ______
                         / _   / /     / /  \/ / /  __/ /  __/ /  __/ / _   /
                        /     / /     / /     / /  _/  /__  / _/ /_  /     /
                        \_/__/  \/_/_/  \/\__/  \___/  \___/  \___/  \_/__/

====================================================================================================

Warning!!!

Your ID
0266840650230231144888564696806083997738366916758278599020579810969377133220860570099235911118833572
8959337123095076876952928587893574632920295678820175934601006051906872660105365970791565026510578199
8723245865008039785856712544814904974796761605784536804693534508704957757067111836918542353744117022
9814226638096010886435904638865582000981365373653298211064809280825296670455191107709704494991291170
0990068316853077549105644004033439328952335514077694400209140191929773490308568323691342448596405004
8780368296498124747712698450544814018121578670850167831069285811174090235675611172006758435346044701
280976904087867316

Your files are encrypted. For data recovery send your personal ID to the mail avalona.toga@aol.com

Your files are encrypted!

Your personal ID:

0917929761014152274149737780187323783584195819704436413348956512276478241905839760960013213511548704
7292835813119471083190783542738151272663511452401423008689852322985882875581351505384279436109420551
3195644985178670908371074541978502093385795554321936811578789769087268893981768636630691170294156863
0001641409901470726951128047557710162324237738973900148516725500703948318716398091801315145163370398
7209309530265582508491798050245267603690380184825103994691228780800520405825851254524620660927543334
0612942271618494313485638586003072645627569885879410427930795429392955374652418684608846164721569730
108530921147338571

Your documents, photos, databases and other important files have been encrypted.
Data recovery is required interpreter.

To get interpreter should send an email to keyinfo24@mail.com  
In a letter to indicate your personal identifier (cm. at the beginning of this document).

If the contact is not obtained through the mail

* Sign up online http://bitmsg.me (online service for sending Bitmessage)
* Send an email to BM-2cU554FPhfTgVV7XvWdxrphAvTvcaJU5yh indicating your address and personal identity

Next, you need to pay for the interpreter. In a response letter you receive an address Bitcoin-Wallets, which must perform the transfer of funds in the amount of 0.2 Bitcoin (0.2 BTC ~ 500$).

If you have no Bitcoin

* Create a wallet Bitcoin: https://blockchain.info/wallet/#/signup
* Get cryptocurrency Bitcoin:
  https://localbitcoins.com/buy_bitcoins (Visa/MasterCard and etc.)
  https://en.bitcoin.it/wiki/Buying_Bitcoins_(the_newbie_version)   (instruction for beginners)
* Send 0.2 BTC at the address specified in the letter

When the transfer is confirmed, you will get the decryption files for your computer.
After start-interpreter program, all your files will be restored.

Attention!

* Do not attempt to remove the program or run the anti-virus tools
* Attempts self-decrypting files will result in the loss of your data
* Decoders are not compatible with other users of your data, because each use`s unique encryption key

====================================================================================================
                         ____     _        _____    _____     ____     _
                        /  __|_  / |____  / ___ \  |  ___\   / __ \   / |____
                        \_____/  \_____/  \_____/  |_____/  /______\  \_____/

                          ______  ______  __  __  _____  _____  _____  ______
                         / _   / /     / /  \/ / /  __/ /  __/ /  __/ / _   /
                        /     / /     / /     / /  _/  /__  / _/ /_  /     /
                        \_/__/  \/_/_/  \/\__/  \___/  \___/  \___/  \_/__/

====================================================================================================

All your files have been encrypted!

Your personal ID
1467213052292214786186398882458716391163606108579116491328759536032804854241823807343438901138152408
5610360333054469945471148237281703911757411867076302088425971201486699054262322375371639010507614656
9653824846664381793666996758132217426436016166781823354804431696996923684226400873590111950993794379
9522954526647241308707594535282141469766654885528126148141764666066447501460834937597497561269810103
4632075195598219008118165985715288418059873432903762812954298923875822783074634321045125703861752951
0844398070118838014237467346506646138403867955387072172579683301498116471088337931201745964302066204
852476814782721698

All your files have been encrypted due to a security problem with your PC.
Data recovery requires a decryptor.

If you want to restore them, write us to the e-mail:zuzyamail@aol.com
Additional Mailing Address e-mail:zuzya@india.com


Attention!
* Do not rename encrypted files.
* Do not try to uninstall the program or run antivirus software
* Attempts to self-decrypt the files will lead to the loss of your data
* Decoders of other users are incompatible with your data, as each user
* Unique encryption key

====================================================================================================