勒索软件家族又一个：Tilde Ransomware

驭龙

君陌潇 发表于 2016-7-26 13:22
趋势简中 实机双击

不愧是跟黑寡妇平起平坐杀Ransomware的大蛐蛐啊

windows7爱好者

aboringman 发表于 2016-7-26 13:26
趋势果然不错啊

我们的ATC和IDP选手最近状态不佳，需要调整

windows7爱好者

趋势还是厉害

EnZhSTReLniKoVa

aboringman 发表于 2016-7-26 13:26
趋势果然不错啊

被阻止后 再下载区找到剩下的程序

EnZhSTReLniKoVa

驭龙 发表于 2016-7-26 13:28
不愧是跟黑寡妇平起平坐杀Ransomware的大蛐蛐啊

All your system is encrypted.

All your files (documents, photos, videos) were encrypted.
It's impossible to get access to your files without necessary decrypt key.
All your attempts to solve problem yourself will be unsuccessful!

We suggest you to read some articles about this type of encryption:
https://en.wikipedia.org/wiki/RSA_(cryptosystem)
https://en.wikipedia.org/wiki/Advanced_Encryption_Standard

Now you have two options to solve the problem:
1. Format your hard disk. This way you'll lose all your files.
2. Pay 0.8 Bitcoin and get key of decryption. At the end of this ad
you'll see your personal ID and our contact information.

Now you should send us email with your personal ID. This email
will be as confirmation you are ready to pay for decryption key.
After payment we'll send you key of decryption with instructions
how to decrypt the system.

Please, don't send us emails with threats. We don't read it and don't reply!
We guarantee we'll send you the decryption key after your payment
so you'll get access to all your files.

Our e-mail address: one1uno243@yandex.com
YOUR PERSONAL IDENTIFIER: 3581983e68cb8f15

这软件剩下的信息

230f4

君陌潇 发表于 2016-7-26 13:30
被阻止后 再下载区找到剩下的程序

被加密了？

驭龙

君陌潇 发表于 2016-7-26 13:31
All your system is encrypted.

All your files (documents, photos, videos) were encrypted.

额，那不是防御不完整？居然生成文件了？

windows7爱好者

230f4 发表于 2016-7-26 13:32
被加密了？

看起来生成了勒索信，但是没有加密
（我内心暗喜，果然还是蜘蛛更强一些）
毫无掩饰的骄傲心理

windows7爱好者

驭龙 发表于 2016-7-26 13:34
额，那不是防御不完整？居然生成文件了？

应该是生成了勒索信

windows7爱好者

君陌潇 发表于 2016-7-26 13:31
All your system is encrypted.

All your files (documents, photos, videos) were encrypted.

趋势说被恢复的那三个文件还好吗，桌面背景呢