Вирус vaccine атаковал Windows server 2012 r2

[Nurlan2603]

Добрый вечер!

Сегодня обнаружили, что практически все файлы на windows server 2012 r2 зашифрованы, а в каждой категории лежат аналогичные файлы txt с посланием:

 

HOW TO RECOVER YOUR FILES INSTRUCTION

ATENTION!!!

We are realy sorry to inform you that  ALL YOUR FILES WERE ENCRYPTED 

by our automatic software. It became possible because of bad server security.  

ATENTION!!!

Please don't worry, we can help you to RESTORE your server to original

state and decrypt all your files quickly and safely!

 

INFORMATION!!!

Files are not broken!!!

Files were encrypted with AES-128+RSA-2048 crypto algorithms.

There is no way to decrypt your files without unique decryption key and special software. Your unique decryption key is securely stored on our server. For our safety, all information about your server and your decryption key will be automaticaly DELETED AFTER 7 DAYS! You will irrevocably lose all your data!

* Please note that all the attempts to recover your files by yourself or using third party tools will result only in irrevocable loss of your data!

* Please note that you can recover files only with your unique decryption key, which stored on our side. If you will use the help of third parties, you will only add a middleman.

 

HOW TO RECOVER FILES???

Please write us to the e-mail (write on English or use professional translator):

 

vaccine2018@tutamail.com

vaccine246@gmail.com (Spare, in case there is no response from the first mailbox within 24 hours)

 

You have to send your message on each of our 3 emails due to the fact that the message may not reach their intended recipient for a variety of reasons!

  

We recommed you to attach 3 encrypted files to your message. We will demonstrate that we can recover your files. 

*   Please note that files must not contain any valuable information and their total size must be less than 5Mb. 

 

OUR ADVICE!!!

Please be sure that we will find common languge. We will restore all the data and give you recommedations how to configure the protection of your server.

 

Recovery time from 30 minutes to 10 hours, including local drives and connected devices.

We will definitely reach an agreement !!!

vaccine2018.txt

[SQ]

Порядок оформления запроса о помощи.

 

Сообщите пожалуйста, если ваш сервер доступен из вне по RDP?

 

Также, если ваш сервер имеет прямой доступ в интернет или находится за сетевым оборудованием (например: роутер, аппаратный межсетевой экран)?

[Nurlan2603]

нет сейчас не имеет. Отключили от сети