PCLocker勒索软件家族详情

【家族名】
Win32/Ransom.PCLocker
[平台]   /   [主类型]  .  [家族名]
平台类型 :  Win32 Win64
威胁类型 : Ransom
【是否支持解密】
360解密大师：暂不支持
在线解密：暂不支持
【被加密文件】
被加密文件后缀格式：.pclocked
修改文件后缀为


【勒索提示信息】：
文件名：RECOVERY_ID.txt
文件内容
---------------------------------------------------------------------------------------------------------------------------
All your files are encrypted.
To recover them, place 'DECRYPT_ME.txt' with the key on your desktop.
To obtain a key, please write an E-Mail to up-coding@proton.me with your Decryption Code!
Decryption Code: bd61739efd3db89c222d3abcf5e67de397fecd3e533bbd3f899b9544ca5d0d7e51e13c94d95a1e57cbcea70a013bc41f0831ae6b5e06934d41c2364f3cd2e714e419ecd85134f2431806c9281de423f1c9336f9105cae8e977899af668286102cc647858dbe8fac37d9543b71aa818c18267eb5f8dd105ddc0aa7c1e999b3771b6d93860b27a4055c555212a45628cbdd300c828f3c990a495e0e23f5af26db760df082dfb1ed7805c1af576af53fed4573f49c8cf9048a6abbc5e82e01b7713c06b9d5ccbdba97faf6e846ee52f6424b8598dcce55471e0d1410ed2c8a6081f1c278494564788f6556c6245fdb3d08940dc6105a964d4e8503352295c0bd83798d9295764612bc60f134b9b4c657bf4305c9451f1bc37e92b24bf06be0b824a914d95421f7f7c25949705b1e6f738c16a77cc9fd5d9718b766ad5d39ca091eccd21093df17010c67d4a3457b3fc365d1590ba342e5e6d93b8e82d8e7c331f646463e63729fe30057142ed1b1efa28996aebf690f7d5e0353b8f0de849b0e4cd44a15615e29b0fbbaa72a0c7576f5ca5ce94bf76b197c0784d544c7f40eca74b89d7dc2dc2a095cae98addd7880ee04ed7ea950834c50f277cd67d1a7561d3a18a00d4c3841af27aa90a7145cfc613642523e300bc053e8886339652d71dc0cbcde934da6b14da551cf67dded786f485637b4096f29f428c0b0fb96f9705637dac4bbd4266e8b94d8d2530d4cea5833f3759a5c301c598413202c878afb9f3dc774b205817135c408c4d628a719d784b57b759b1ed2e415f045a56688bc99ec3116473c1f5a68831bd2f840a57b2e46a6f966abb24aad20b482a9d3f7a627eceed52f28891d2272f7f126be05379f4f436242870df3dbf2125796c4e7076350354a1680ca2e166fe4be3065989459729e2d39270faba9586ed09732be65af732499f4463c70f1338bd3c8bcb90851f198a342c1067e3a231fe6a7197b2c993675703574e734f370941088d6d6c5f55be492844b52b8655c2ebce7699236e32fe6e86d8103305eb4b0e13f74523547d5dc6c35a5feed42d3a1b46a52fae67bc05fa897a70032f4cb930ae62900f2b0369e60bdca0f29a481129e72e7a16dd358981bc627abf7a17bedc2d203890aa08ce0ec63201bf2b2ef9282ae2d15146fa8e2fb083c3064023d8b94b5ac73ff05f273002bc91701f787e5eb18211b155fdece370dc5f608a0d407e768e23ecf0f350d28ad0f90ead32c43e63ac05a5c2b8dda19c328007592f611380b05a76edbc8cd1631d9de379743ad01a7a1b5e43ecdb05b0e7741078a57ecd71482958e158684f30592551ce7fdbcb83292e603dcd6bd020e6edfb2cc981c2e85cc9d7baef200b054239a02b51ec8bbce740b2c362f000ac64dc00fc053a725cd810dd20cc43a2031c783ebc545e8d18721096d8c3f5a0f0605a34c8f79ce4f9824c70a0234b6182d4f46bf6c0ba92962c74c6663e2b69d54e02951893bc5cca9dc79f1d1b72db4a86cc34e25b162587c25c4e35c0558cfac1e914fd98eefe0ff3d4d1df605d31b49aa798b082e23c8add491e757d8bd5ef49ba5a9723403aceac87a34f680efab22c8a95360b3586e35c98878c33e1b8d6e569b51d69c3a1201ce8acda25c2666b5383566439fa1595ef35de9270150e9fd058fce91c8e9d5f97c7fd1a62fae04790fb383bf959431aabc4ef291a2f86bca9d4a5ee43721ba094bac1cee540ac86f056d08640bdfa35ed239f7dc7ea49142d68c645c7802113f25162dc5bcf0b99a4727fa033ee7094531e09164c57570d2e5e3fc58dc02a44b07d816302c9903d485d1f9876cefb936f8510ab7558075b637edb068317cadade687801b75bb56daeb3e4ff8288a3da6026b7aa51e1c594798b4ce34627aed8f4f4f858eb817f3128c6dbf48be4264d9c04fbb3aa3c81c92c7b1e112b52b4ac4a6b2b33806727841e6d56fffab4a992dae42ea2c4f18a07d0251104eec6cba335a7074ed1b8f7b20275f4e0c0b97c1d481ca16080bf01c2670c49fa00809584cda9a3da85503d1b57b87b3662f42dfcbdae2845d1ba8bb2c81a4366b0771824d4ea5303c374f0f107ed0bd8e8cac17f8620727e1e791210e965cfdf249b73b7ea980d126bc55246aecfbd6d6deef89fa983308b0df3de590222f04aac478784b08af012f8f8e920e7bce9291196318f8eb478bd2b86
If you lose this Code, your files CANNOT be decrypted anymore.
Note: This is a Experiment. If you get compromised by this, please contact up-coding@proton.me to obtain your decryption code for free.
---------------------------------------------------------------------------------------------------------------------------


【防护建议】
1.多台机器，不要使用相同的账号和口令
2.登录口令要有足够的长度和复杂性，并定期更换登录口令
3.重要资料的共享文件夹应设置访问权限控制，并进行定期备份
4.定期检测系统和软件中的安全漏洞，及时打上补丁。
5.定期到服务器检查是否存在异常。查看范围包括：
a)是否有新增账户
b) Guest是否被启用
c) Windows系统日志是否存在异常
d)杀毒软件是否存在异常拦截情况
6.安装安全防护软件，并确保其正常运行。
7.从正规渠道下载安装软件。
8.对不熟悉的软件，如果已经被杀毒软件拦截查杀，不要添加信任继续运行。