xuan923 0 Posted October 19, 2018 Report Share Posted October 19, 2018 Who can help out? The ransomware virus has been added. .rlfrhtuThis is the screen of extortion https://drive.google.com/file/d/12xgx84oYaCP5A7X6TzRLiGkTZqPtMEQd/view?usp=drivesdkThe file contents are as follows: ALL YOUR DOCUMENTS PHOTOS DATABASES AND OTHER IMPORTANT FILES HAVE BEEN ENCRYPTED! =========================================================== =========================================================== Your files are NOT damaged! Your files are modified only. This modification is reversible. The only 1 way to decrypt your files is to receive the private key and decryption program. Any attempts to restore your files with the third party software will be fatal for your files! =========================================================== =========================================================== To receive the private key and decryption program follow the instructions below: 1. Download "Tor Browser" from https://www.torproject.org/ and install it. 2. In the "Tor Browser" open your personal page here: Http://5c28aab814b0d0205.g766gpako7ar7vva.onion/rlfrhtu Note! This page is available via "Tor Browser" only. =========================================================== =========================================================== Also you can use temporary addresses on your personal page without using "Tor Browser": Http://5c28aab814b0d0205.dooryet.wales/rlfrhtu Http://5c28aab814b0d0205.helpsam.icu/rlfrhtu Http://5c28aab814b0d0205.upjust.top/rlfrhtu Http://5c28aab814b0d0205.canmuch.cymru/rlfrhtu Note! These are temporary addresses! They will be available for a limited amount of time! Quote Link to post Share on other sites
GT500 872 Posted October 22, 2018 Report Share Posted October 22, 2018 I recommend uploading a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with:https://id-ransomware.malwarehunterteam.com/ You can paste a link to the results into a reply if you would like for me to review them. Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.