• :
  • XFXGFGHHRT-DECRYPT-爱毒霸交流论坛
    用户
     找回密码

        找回密码

    QQ登录

    只需一步,快速开始

    搜索

    [已经回复] XFXGFGHHRT-DECRYPT

    [复制链接]

    该用户从未签到

    发表于 2018-11-21 09:57:29 只看该作者

    马上注册,结交更多好友,享用更多功能,让你轻松玩转社区。

    您需要 登录 才可以下载或查看,没有帐号?

    x
    别人在我电脑用过,所有WORD文档都有后缀XFXGFGHHRT。并且每个文件夹中都有以下文档,内容如下:


    ---=    GANDCRAB V5.0.4  =---
    ***********************UNDER NO CIRCUMSTANCES DO NOT DELETE THIS FILE, UNTIL ALL YOUR DATA IS RECOVERED***********************
    *****FAILING TO DO SO, WILL RESULT IN YOUR SYSTEM CORRUPTION, IF THERE ARE DECRYPTION ERRORS*****
    Attention!
    All your files, documents, photos, databases and other important files are encrypted and have the extension: .XFXGFGHHRT   
    The only method of recovering files is to purchase an unique private key. Only we can give you this key and only we can recover your files.

    The server with your key is in a closed network TOR. You can get there by the following ways:
    ----------------------------------------------------------------------------------------
    | 0. Download Tor browser - https://www.torproject.org/
    | 1. Install Tor browser
    | 2. Open Tor Browser
    | 3. Open link in TOR browser:   http://gandcrabmfe6mnef.onion/abebe58e68ad56cc                        
    | 4. Follow the instructions on this page
    ----------------------------------------------------------------------------------------                    
       
    On our page you will see instructions on payment and get the opportunity to decrypt 1 file for free.

    ATTENTION!
    IN ORDER TO PREVENT DATA DAMAGE:
    * DO NOT MODIFY ENCRYPTED FILES
    * DO NOT CHANGE DATA BELOW
    ---BEGIN GANDCRAB KEY---
    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**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
    ---END GANDCRAB KEY---
    ---BEGIN PC DATA---
    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
    ---END PC DATA---
    使用道具 举报 回复
    您这种情况是中了国外勒索病毒,请问中招前有安装毒霸吗?
    使用道具 举报 回复 支持 反对
    我也中了这个病毒。后缀名不同。文件没法解密啊!400多G的数据都被加密了。不知道毒霸能不能解决,Bitdefender开发的工具只能解密5.0.3
    贴上来供管理员参考。
    我这个肯定是u盘病毒传播的,以前局域网常见的病毒,内网上没有太大危害,自动隐藏所有u盘文件,然后需要文件夹查看设置显示系统文件和隐藏文件才能看到文件的。
    ---=    GANDCRAB V5.0.4  =---

    ***********************UNDER NO CIRCUMSTANCES DO NOT DELETE THIS FILE, UNTIL ALL YOUR DATA IS RECOVERED***********************

            *****FAILING TO DO SO, WILL RESULT IN YOUR SYSTEM CORRUPTION, IF THERE ARE DECRYPTION ERRORS*****

    Attention!

    All your files, documents, photos, databases and other important files are encrypted and have the extension: .HYWPOBIDZ   

    The only method of recovering files is to purchase an unique private key. Only we can give you this key and only we can recover your files.


    The server with your key is in a closed network TOR. You can get there by the following ways:

    ----------------------------------------------------------------------------------------

    | 0. Download Tor browser - https://www.torproject.org/

    | 1. Install Tor browser
    | 2. Open Tor Browser
    | 3. Open link in TOR browser:   http://gandcrabmfe6mnef.onion/108d898e7244a542                        
    | 4. Follow the instructions on this page

    ----------------------------------------------------------------------------------------                    
       

    On our page you will see instructions on payment and get the opportunity to decrypt 1 file for free.


    ATTENTION!

    IN ORDER TO PREVENT DATA DAMAGE:

    * DO NOT MODIFY ENCRYPTED FILES
    * DO NOT CHANGE DATA BELOW

    ---BEGIN GANDCRAB KEY---
    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
    ---END GANDCRAB KEY---

    ---BEGIN PC DATA---
    wfKD6iudumBkmpL8IRr4U4exEVaoOXLtwDxpOrf13FY7vOeWJh5EYbNdppZnTrRRoXYx7llWiLfwTByH9x5TB**wdNQ74z6d0HTDA/iIpJT8/vFdv/8mGaodZA5Lruj6Pxc2UjxPJKUir6hEkSOApAAqbZgOMGX0rn7bWUkWnRxbZiWqMCRYZVYS6SPxsApS44329qACVKUZDVVpwPbuU3cBCJ92PeMM0O5MPsPh4obLFGTGJxjmtkoQXZnP7g/S/qe1vBzjTbrjctAG3g4l4JnF91hCEExRA7ADM8r531sSmjFTA/1keQtJdi8qcOn5rr3565ijLEgkRHBpOKp/y42F+siGs1YLlrSBnnt7hGJEYQbzidL4o24NqbgY8tyYYz32XOiyJQTTToqaVO9JIYJp5E5wNcoABPKnLk+Uu4LAOufgGFFg6ZrXg2QxGZKtQ6DZkDpCxFI3vPLMeas1w4ZMXQQRlWKdDnR1lHga38MmUvfkCz0QUhnnLIrls6w6nIMVYfpejfofGAcdsAVPw9N6n8jQwXCtKZAEuPtLEioBYpMZZH3HpoOer/MRdwPrYl8V7zu47PLzMb9MXYDh8wz7+xMRfVtXf/SbjvWqOJIXsRePtQi9EthLFKe2vtgwGm1LQ4zzQsJfmD5G2FbiSkEiLJWT/LbVwErKYb/kzNmdHA3rG4FfbWU5XJyLaG8CR1KXfIDGNZ8jSrfzQrPwnguz8U=
    ---END PC DATA---
    使用道具 举报 回复 支持 反对
    您需要登录后才可以回帖 登录 | 注册

    本版积分规则