- Oct 27, 2022
- 2
تعرضت اليوم للاختراق باستخدام فيروس Powd ، وتم تغيير جميع ملفاتي إلى نوع powd ، وتم إرفاق رسالة الفدية ، وحتى الآن لم أجد حلًا لمشكلتي. اريد حلا من فضلك
Today I was hacked with Powd virus, all my files were changed to powd type, and I was attached to the ransom message, and so far I have not found a so
- Thread starter Anwar benmadani
- Start date
- Status
- Nov 5, 2019
- 1,597
Hello, Welcome to MalwareTips.
I'm nasdaq and will be helping you.
If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===
The Powd virus is known as STOP/DJVU ransomware family of malware.
Navigate to this topic.
id-ransomware.malwarehunterteam.com
Submit a sample of the compromised files for their review.
They will reply and let you know what you are dealing with.
From what we know now, your files are not recoverable.
Your only solution would be to restore the files from a good backup if you have one.
The compromised files can be transferred to a CD or Flash drive.
Should a solution be found in the future you may be able to restore them.
It's never to late to use common sense to guard against being infected.
Tips on how to prevent ransomware attacks
Good luck.
p.s.
If you have any other issues with this computer please run this program.
Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Note:
rename FRST or FiRST 64 bit to FRSTENGLISH.exe for the report to be in the English language.. Thank you.
Ensure that you are in an Administrator Account
Double-click to run it. When the tool opens click Yes to disclaimer.
Check the boxes as seen here:
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
[img=[URL]http://deeprybka.trojaner-board.de/eset/eng/attachlogs.png[/URL]]
Attach the file(s). A 2 Steps process.
Reply to this topic.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach. <- Step 1.
Click Attach this file. <- Step 2.
Click the Add reply button.
Please post the logs for my review.
Let me know what problems persists.
Wait for further instructions
p.s.
The Farbar program is updated often.
If it's identified as suspicious by your Anti-Virus program trust it if Downloaded from the link I provided.
You should restore the program from the Quarantine folder.
====
I'm nasdaq and will be helping you.
If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.
===
The Powd virus is known as STOP/DJVU ransomware family of malware.
Navigate to this topic.
ID Ransomware
Upload a ransom note and/or sample encrypted file to identify the ransomware that has encrypted your data.
id-ransomware.malwarehunterteam.com
Submit a sample of the compromised files for their review.
They will reply and let you know what you are dealing with.
From what we know now, your files are not recoverable.
Your only solution would be to restore the files from a good backup if you have one.
The compromised files can be transferred to a CD or Flash drive.
Should a solution be found in the future you may be able to restore them.
It's never to late to use common sense to guard against being infected.
Tips on how to prevent ransomware attacks
How to Protect Yourself from Ransomware
What does ransomware do and how can I protect myself? Learn how to protect your computer with ransomware scanners
www.kaspersky.com
Good luck.
p.s.
If you have any other issues with this computer please run this program.
Download the Farbar Recovery Scan Tool (FRST).
Choose the 32 or 64 bit version for your system.
and save it to a folder on your computer's Desktop.
Note:
rename FRST or FiRST 64 bit to FRSTENGLISH.exe for the report to be in the English language.. Thank you.
Ensure that you are in an Administrator Account
Double-click to run it. When the tool opens click Yes to disclaimer.
Check the boxes as seen here:
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.
How to attach a file to your reply:
In the Reply section in the bottom of the topic Click the "more reply Options" button.
[img=[URL]http://deeprybka.trojaner-board.de/eset/eng/attachlogs.png[/URL]]
Attach the file(s). A 2 Steps process.
Reply to this topic.
Select the "Choose a File" navigate to the location of the File.
Click the file you wish to Attach. <- Step 1.
Click Attach this file. <- Step 2.
Click the Add reply button.
Please post the logs for my review.
Let me know what problems persists.
Wait for further instructions
p.s.
The Farbar program is updated often.
If it's identified as suspicious by your Anti-Virus program trust it if Downloaded from the link I provided.
You should restore the program from the Quarantine folder.
====
- Oct 27, 2022
- 2
مرحبًا ، مرحبًا بك في MalwareTips.
أنا ناسداك وسوف أساعدك.
إذا كان بإمكانك طباعة هذا الموضوع من فضلك ، فسوف يسهل عليك اتباع التعليمات وإكمال جميع الخطوات الضرورية بالترتيب المدرج.
===
يُعرف فيروس Powd باسم STOP / DJVU ransomware عائلة البرامج الضارة.
انتقل إلى هذا الموضوع.
[URL unfurl = "true"] ID Ransomware [/ URL]
أرسل عينة من الملفات المخترقة لمراجعتها.
سيقومون بالرد وإعلامك بما تتعامل معه.
مما نعرفه الآن ، ملفاتك غير قابلة للاسترداد.
سيكون الحل الوحيد هو استعادة الملفات من نسخة احتياطية جيدة إذا كان لديك واحد.
يمكن نقل الملفات المخترقة إلى قرص مضغوط أو محرك أقراص فلاش.
إذا تم العثور على حل في المستقبل ، فقد تتمكن من استعادتها.
لم يتأخر أبدًا استخدام الفطرة السليمة للوقاية من الإصابة.
نصائح حول كيفية منع هجمات برامج الفدية
[URL unfurl = "true"] Ransomware protection: How to keep your data safe in 2022 [/ URL]
حظا طيبا وفقك الله.
ملاحظة
إذا كانت لديك أية مشكلات أخرى مع هذا الكمبيوتر ، فيرجى تشغيل هذا البرنامج.
قم بتنزيل أداة Farbar Recovery Scan Tool (FRST).
اختر الإصدار 32 أو 64 بت لنظامك.
واحفظه في مجلد على سطح المكتب بجهاز الكمبيوتر الخاص بك.
ملحوظة:
أعد تسمية FRST أو FiRST 64 بت إلى FRSTENGLISH.exe ليكون التقرير باللغة الإنجليزية .. شكرًا لك.
تأكد من أنك في حساب المسؤول
انقر نقرًا مزدوجًا لتشغيله. عند فتح الأداة ، انقر فوق "نعم" لإخلاء المسؤولية.
حدد المربعات كما هو موضح هنا:
اضغط على زر المسح الضوئي.
سيقوم بعمل سجل (FRST.txt) في نفس الدليل الذي يتم تشغيل الأداة فيه. يرجى نسخه ولصقه في ردك.
في المرة الأولى التي يتم فيها تشغيل الأداة ، تقوم أيضًا بإنشاء سجل آخر (Addition.txt). يرجى إرفاقه بردك.
كيفية إرفاق ملف بردك:
في قسم " الرد " في الجزء السفلي من الموضوع ، انقر فوق الزر " مزيد من خيارات الرد ".
[img = http://deeprybka.trojaner-board.de...ile terenkripsi dengan pesan tebusan [/QUOTE]
- Status
Similar threads
-
- Locked
- Locked