请教是不是中勒索病毒，有解吗 ? 作业系统：WIN 7 (目前还能正常开机) 中毒档案都会有副档名"ribbswkr"：PDF, JPG (所有档案里，没有全都中。),WORD, EXCEL,PPT,邮件pst… 例如：xxxxx.pdf.ribbskwr xxxxx.jpg.ribbswkr xxxxx.ppt.ribbswkr 另外在每个中毒档案的资料夹里，都有"README.TXT"，其内容如下： 请问大大，档案有机会救回吗 ? ALL YOUR DOCUMENTS PHOTOS DATABASES AND OTHER IMPORTANT FILES HAVE BEEN ENCRYPTED! ==================================================================================================== Your files are NOT damaged! Your files are modified only. This modification is reversible. The only 1 way to decrypt your files is to receive the private key and decryption program. Any attempts to restore your files with the third party software will be fatal for your files! ==================================================================================================== To receive the private key and decryption program follow the instructions below: 1. Download "Tor Browser" from https://www.torproject.org/ and install it. 2. In the "Tor Browser" open your personal page here: http://1y9m1w3g5q7a9k1u3e5.gvnthwjr3zipxntt.onion/ribbswkr Note! This page is available via "Tor Browser" only. ==================================================================================================== Also you can use temporary addresses on your personal page without using "Tor Browser": http://1y9m1w3g5q7a9k1u3e5.beenmet.host/ribbswkr http://1y9m1w3g5q7a9k1u3e5.lainhe.site/ribbswkr http://1y9m1w3g5q7a9k1u3e5.gasadd.space/ribbswkr http://1y9m1w3g5q7a9k1u3e5.trysad.pw/ribbswkr Note! These are temporary addresses! They will be available for a limited amount of time! --

※ 发信站: 批踢踢实业坊(ptt.cc), 来自: 223.140.8.247 ※ 文章网址: https://webptt.com/cn.aspx?n=bbs/AntiVirus/M.1533649383.A.F12.html