GANDCRAB V5.2勒索病毒新变种http://gandcrabmfe6mnef.onion 请大家做好防御措施
---= GANDCRAB V5.2 =---
UNDER NO CIRCUMSTANCES DO NOT DELETE THIS FILE, UNTIL ALL YOUR DATA IS RECOVERED
*****FAILING TO DO SO, WILL RESULT IN YOUR SYSTEM CORRUPTION, IF THERE ARE DECRYPTION ERRORS*****Attention!
All your files, documents, photos, databases and other important files are encrypted and have the extension: .QAHYVNX
The only method of recovering files is to purchase an unique private key. Only we can give you this key and only we can recover your files.
The server with your key is in a closed network TOR. You can get there by the following ways:
| 0. Download Tor browser - https://www.torproject.org/
| 1. Install Tor browser
| 2. Open Tor Browser
| 3. Open link in TOR browser: http://gandcrabmfe6mnef.onion/18da3a3e50d08fd7
| 4. Follow the instructions on this page
为防止用户感染该类病毒，我们可以从安全技术和安全管理两方面入手：
1、不要打开陌生人或来历不明的邮件，防止通过邮件附件的**；
2、尽量不要点击office宏运行提示，避免来自office组件的病毒感染；
3、需要的软件从正规（官网）途径下载，不要双击打开.js、.vbs等后缀名文件；
4、升级到最新的防病毒等安全特征库；
5、升级防病毒软件到最新的防病毒库，阻止已存在的病毒样本；
6、定期异地备份计算机中重要的数据和文件，万一中病毒可以进行恢复
7、找可靠的恢复数据公司解密，可咨询qq2362441418**
原文地址：https://blog.51cto.com/14214473/2357352