請教是不是中勒索病毒，有解嗎 ? 作業系統：WIN 7 (目前還能正常開機) 中毒檔案都會有副檔名"ribbswkr"：PDF, JPG (所有檔案裏，沒有全都中。),WORD, EXCEL,PPT,郵件pst… 例如：xxxxx.pdf.ribbskwr xxxxx.jpg.ribbswkr xxxxx.ppt.ribbswkr 另外在每個中毒檔案的資料夾裏，都有"README.TXT"，其內容如下： 請問大大，檔案有機會救回嗎 ? ALL YOUR DOCUMENTS PHOTOS DATABASES AND OTHER IMPORTANT FILES HAVE BEEN ENCRYPTED! ==================================================================================================== Your files are NOT damaged! Your files are modified only. This modification is reversible. The only 1 way to decrypt your files is to receive the private key and decryption program. Any attempts to restore your files with the third party software will be fatal for your files! ==================================================================================================== To receive the private key and decryption program follow the instructions below: 1. Download "Tor Browser" from https://www.torproject.org/ and install it. 2. In the "Tor Browser" open your personal page here: http://1y9m1w3g5q7a9k1u3e5.gvnthwjr3zipxntt.onion/ribbswkr Note! This page is available via "Tor Browser" only. ==================================================================================================== Also you can use temporary addresses on your personal page without using "Tor Browser": http://1y9m1w3g5q7a9k1u3e5.beenmet.host/ribbswkr http://1y9m1w3g5q7a9k1u3e5.lainhe.site/ribbswkr http://1y9m1w3g5q7a9k1u3e5.gasadd.space/ribbswkr http://1y9m1w3g5q7a9k1u3e5.trysad.pw/ribbswkr Note! These are temporary addresses! They will be available for a limited amount of time! --

※ 發信站: 批踢踢實業坊(ptt.cc), 來自: 223.140.8.247 ※ 文章網址: https://webptt.com/m.aspx?n=bbs/AntiVirus/M.1533649383.A.F12.html