如題 今天下午出門時還沒事 半夜回來我切換到桌面(先前有其他家人在用電腦) 發現中了勒索病毒 NOT YOUR LANGUAGE? USE https://translate.google.com What happened to your files ? All of your files were protected by a strong encryption with RSA4096 More information about the encryption keys using RSA4096 can be found here: http://en.wikipedia.org/wiki/RSA_(cryptosystem) How did this happen ? !!! Specially for your PC was generated personal RSA4096 Key , both public and private. !!! ALL YOUR FILES were encrypted with the public key, which has been transferred to your computer via the Internet. !!! Decrypting of your files is only possible with the help of the private key and decrypt program , which is on our Secret Server What do I do ? So , there are two ways you can choose: wait for a _miracle_ and get _your_ PRICE DOUBLED! Or start obtaining *BITCOIN NOW! , and restore _YOUR_ _DATA_ easy way If You have really valuable _DATA_, you better _NOT_ _WASTE_ _YOUR_ _TIME_, because there is _NO_ other way to get your files, except make a _PAYMENT_ Your personal ID: ********************************** For more specific instructions, please visit your personal home page, there are a few different addresses pointing to your page below: 1 - http://j24o****pgaorlxj.onion.to 2 - http://j24o****pgaorlxj.onion.city If for some reasons the addresses are not availablweropie, follow these steps: (網址太多直接拿掉) 可是我再怎麼看 除了桌面被換 多了勒索信的txt跟jpg之外 完全沒有東西被加密啊 桌面 c槽 桌面的資料夾 點進去 文件都是好的 打開也都正常的 究竟是怎麼回事@@ 其實我的確沒啥重要文件可以被勒索的 只是現在我有點猶豫要不要重灌... 還是就不理他把桌面換回來 當作沒發生 = = --

※ 發信站: 批踢踢實業坊(ptt.cc), 來自: 61.230.120.60 ※ 文章網址: https://webptt.com/m.aspx?n=bbs/AntiVirus/M.1471546740.A.EBD.html 目前實在不清楚 中的時候應該是家人在用 他平常就是上網聽日文老歌 找歌詞 看新聞 不太會下載東西更不會想載片之類的 只是要是不小心點到什麼 他可能也不記得@@ 我其實本來就有打算重灌...因為根本沒有什麼重要的東西 只是後來把桌面改掉txt html jpg刪掉 今天也沒跑出來... 就有點猶豫了 ※ 編輯: Django (36.227.254.36), 08/19/2016 12:58:27 我自己用都是用Chrome 家人都是用ie 後面答案都是no no no ※ 編輯: Django (36.227.254.36), 08/19/2016 13:50:28 囧 是這個嗎? http://blog.trendmicro.com.tw/?p=25235#more-25235 ※ 編輯: Django (140.112.16.141), 08/19/2016 18:33:35