【家族名】
Win32/Ransom.DarkWorld/ .
平台类型 : Win32 Win64
威胁类型 : Ransom
【是否支持解密】
360解密大师：暂不支持
在线解密：加WX gage158
【被加密文件】
被加密文件后缀格式： 修改文件后缀为.dark 如图
:【勒索提示信息】：
文件名：
文件内容 ：
-------------------------------------------------------------------------------
DEAR USER..
This is the developer of DarkWorld File Crypter tool, you have been running our tool in your system which caused your files to get encrypted.
Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important files that were encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase the Decryption tool from me.
the decryption tool will not be able to decrypt your files if the encrypted files were encrypted after 72 hours , which means you need to contact us before 72hours from decryption so we can help you solve your problem.
Please note that you'll never restore your data without payment.
Price of private key and decrypt software is $300.
To Buy the decryption tool you must follow the following steps :
1 - Send the equivalent of 300$ in bitcoins
to this wallet : 1EdxGR5fxRjhWtxNSbyDHv4nVdx5BP54L2
-----------------------------------------------------
* What is bitcoin ? : https://www.investopedia.com/terms/b/bitcoin.asp
* How to buy Bitcoin ? : https://www.investopedia.com/art ... vesting-bitcoin.asp
* Where to buy Bitcoin ? :
https://www.blockchain.com/
https://coinbase.com/
https://robinhood.com/
https://www.coinmama.com
-----------------------------------------------------
2 - Once your payment is done copy your personal ID and send it to me in this email : << darksimo@protonmail.com >>.
-----------------------------------------------------
3 - After i confirm the payment is received you will immediatly receive the decryption tool and the decryption key of your files , and also you will receive a full guide and a video explaining how to use the decryption tool to decrypt all your files .
-----------------------------------------------------
4 - in case of trust issues you can send one of your encrypted files to my email and i will decrypt it and send it back to you as a valid proof of the decryption tool.
Your personal ID : 16101871
-------------------------------------------------------------------------------
【防护建议】
1.多台机器，不要使用相同的账号和口令
2.登录口令要有足够的长度和复杂性，并定期更换登录口令
3.重要资料的共享文件夹应设置访问权限控制，并进行定期备份
4.定期检测系统和软件中的安全漏洞，及时打上补丁。
5.定期到服务器检查是否存在异常。查看范围包括：
a)是否有新增账户
b) Guest是否被启用
c) Windows系统日志是否存在异常
d)杀毒软件是否存在异常拦截情况
6.安装安全防护软件，并确保其正常运行。
7.从正规渠道下载安装软件。
8.对不熟悉的软件，如果已经被杀毒软件拦截查杀，不要添加信任继续运行。
Win32/Ransom.DarkWorld/ .
平台类型 : Win32 Win64
威胁类型 : Ransom
【是否支持解密】
360解密大师：暂不支持
在线解密：加WX gage158
【被加密文件】
被加密文件后缀格式： 修改文件后缀为.dark 如图
:【勒索提示信息】：
文件名：
文件内容 ：
-------------------------------------------------------------------------------
DEAR USER..
This is the developer of DarkWorld File Crypter tool, you have been running our tool in your system which caused your files to get encrypted.
Don't worry, you can return all your files!
All your files like pictures, databases, documents and other important files that were encrypted with strongest encryption and unique key.
The only method of recovering files is to purchase the Decryption tool from me.
the decryption tool will not be able to decrypt your files if the encrypted files were encrypted after 72 hours , which means you need to contact us before 72hours from decryption so we can help you solve your problem.
Please note that you'll never restore your data without payment.
Price of private key and decrypt software is $300.
To Buy the decryption tool you must follow the following steps :
1 - Send the equivalent of 300$ in bitcoins
to this wallet : 1EdxGR5fxRjhWtxNSbyDHv4nVdx5BP54L2
-----------------------------------------------------
* What is bitcoin ? : https://www.investopedia.com/terms/b/bitcoin.asp
* How to buy Bitcoin ? : https://www.investopedia.com/art ... vesting-bitcoin.asp
* Where to buy Bitcoin ? :
https://www.blockchain.com/
https://coinbase.com/
https://robinhood.com/
https://www.coinmama.com
-----------------------------------------------------
2 - Once your payment is done copy your personal ID and send it to me in this email : << darksimo@protonmail.com >>.
-----------------------------------------------------
3 - After i confirm the payment is received you will immediatly receive the decryption tool and the decryption key of your files , and also you will receive a full guide and a video explaining how to use the decryption tool to decrypt all your files .
-----------------------------------------------------
4 - in case of trust issues you can send one of your encrypted files to my email and i will decrypt it and send it back to you as a valid proof of the decryption tool.
Your personal ID : 16101871
-------------------------------------------------------------------------------
【防护建议】
1.多台机器，不要使用相同的账号和口令
2.登录口令要有足够的长度和复杂性，并定期更换登录口令
3.重要资料的共享文件夹应设置访问权限控制，并进行定期备份
4.定期检测系统和软件中的安全漏洞，及时打上补丁。
5.定期到服务器检查是否存在异常。查看范围包括：
a)是否有新增账户
b) Guest是否被启用
c) Windows系统日志是否存在异常
d)杀毒软件是否存在异常拦截情况
6.安装安全防护软件，并确保其正常运行。
7.从正规渠道下载安装软件。
8.对不熟悉的软件，如果已经被杀毒软件拦截查杀，不要添加信任继续运行。
