ReadInstructions后缀勒索病毒泛滥，不少企业中招

　　近几日，力创数据接到不少客户咨询，他们的服务器均遭遇.ReadInstructions后缀勒索病毒攻击，遭遇攻击后，服务器内所有文件包括数据库文件名均被篡改，后缀被添加.ReadInstructions后缀勒索病毒，如图所示：

　　一客户中了.ReadInstructions后缀勒索病毒后的文件夹，如下图所示：

　　该攻击者会在客户每一个文件夹内留下一个名为Recovery_Instructions的html，例举一位中毒客户的文件内内容如下：

　　/!\ YOUR COMPANY NETWORK HAS BEEN PENETRATED /!\

　　All your important files have been encrypted!

　　Your files are safe! Only modified. (RSA+AES)

　　ANY ATTEMPT TO RESTORE YOUR FILES WITH THIRD-PARTY SOFTWARE

　　WILL PERMANENTLY CORRUPT IT.

　　DO NOT MODIFY ENCRYPTED FILES.

　　DO NOT RENAME ENCRYPTED FILES.

　　No software available on internet can help you. We are the only ones able to

　　solve your problem.

　　We gathered highly confidential/personal data. These data are currently stored on

　　a private server. This server will be immediately destroyed after your payment.

　　If you decide to not pay, we will release your data to public or re-seller.

　　So you can expect your data to be publicly available in the near future..

　　We only seek money and our goal is not to damage your reputation or prevent

　　your business from running.

　　You will can send us 2-3 non-important files and we will decrypt it for free

　　to prove we are able to give your files back.

　　Contact us for price (BITCOIN) and get decryption software.

　　recoveryfiles@firemail.cc

　　recoveryfiles2spare@protonmail.ch

　　Make contact as soon as possible. Your private key (decryption key) is only

　　stored temporarily.

　　IF YOU DON'T CONTACT US WITHIN 72 HOURS, PRICE WILL BE HIGHER.

　　中了ReadInstructions后缀勒索病毒后，服务器内所有的文件及数据库都被加密，无法使用，严重影响企业的正常业务运作，会给企业的正常运营带来不可估量的损失。力创数据针对各种勒索病毒，具有专业和有效的防御解决方案，如果您的服务器或者电脑不幸中了勒索病毒，一定不要着急格式化，否则可能数据可能找不回，请及时与我们取得联系，我们是专业的数据恢复公司，会根据实际情况能提供专业全面的解决方案，为您网络安全保驾护航。力创数据也提醒各个企业，一定要注重网络安全防御，在高度数字化的今天，数据的价值越来越大，一旦丢失损失巨大，遇到任何网站安全问题或者已经中了勒索病毒请立即联系我们免费咨询。

如有疑问，马上在线咨询 点击在线咨询