.Globeimposter-Beta865qqz勒索病毒

 

病毒家族 Globeimposter3.0、十二生肖、十二主神
病毒别名 865qqz、Beta
影响系统 Windows
出现时间 2020年

01

.Globeimposter-Beta865qqz勒索病毒中毒后表现

 

 

所有文件被加上.Globeimposter-Beta865qqz后缀(扩展名);

数据和文件被加密,恢复扩展名仍然无法使用;

Windows系统核心文件未加密,Windows系统可以运行;

系统安全服务、SQL服务、虚拟机、杀毒软件等被关闭禁用;

Windows系统备份被删除;

病毒文件自销毁;

Windows日志被删除;

文件夹下生成HOW TO BACK YOUR FILES.exe、HOW TO BACK YOUR FILES !!!.TXT;

02

.Globeimposter-Beta865qqz勒索病毒生成文件信息

 

TO DECRYPT, FOLLOW THE INSTRUCTIONS:

To recover data you need decrypt tool.

To get the decrypt tool you should:

1.In the letter include your personal ID! Send me this ID in your first email to me!

2.We can give you free test for decrypt few files (NOT VALUE) and assign the price for decryption all files!

3.After we send you instruction how to pay for decrypt tool and after payment you will receive a decryption tool! 

4.We can decrypt few files in quality the evidence that we have the decoder.

DO NOT TRY TO DO SOMETHING WITH YOUR FILES BY YOURSELF YOU WILL BRAKE YOUR DATA !!! ONLY WE ARE CAN HELP YOU!CONTACT US:

China.Helper@aol.com

 

ATTENTION !!! THIS IS YOUR PERSONAL ID WICH YOU HAVE TO SEND IN FIRST LETTER:

Your personal ID: ***-***-***

Attention!

 * Do not rename encrypted files.

 * Do not try to decrypt your data using third party software, it may cause permanent data loss.

 * Decryption of your files with the help of third parties may cause increased price (they add their fee to our)

 or you can become a victim of a scam.

03

.Globeimposter-Beta865qqz扩展名勒索病毒其他信息

 

被攻击的应用系统主要有:医疗系统、财务系统、OA、进销存系统等。

04

.Globeimposter-Beta865qqz后缀病毒截取到的工具

 

 

暂无数据

—— 联系我们    Contact Us ——

24小时应急响应电话:15021662155 (微信同号)

 serve@grit.com.cn

样本提交 2012 - 2020 Copyright © 国瑞IT安全服务中心 沪ICP备09036178号 

添加微信好友,详细了解产品
使用企业微信
“扫一扫”加入群聊
复制成功
添加微信好友,详细了解产品
我知道了