求助，公司服务器中了勒索病毒

潇潇暮雨寒

内容如下：
YOUR FILES ARE ENCRYPTED !!!

TO DECRYPT, FOLLOW THE INSTRUCTIONS:

To recover data you need decrypt tool.

To get the decrypt tool you should:

1.In the letter include your personal ID! Send me this ID in your first email to me!
2.We can give you free test for decrypt few files (NOT VALUE) and assign the price for decryption all files!
3.After we send you instruction how to pay for decrypt tool and after payment you will receive a decryption tool!
4.We can decrypt few files in quality the evidence that we have the decoder.
5.Your key is only kept for 7 days beyond which it will never be decrypted!
6.Do not rename, do not use third-party software or the data will be permanently damaged!

CONTACT US:
acookies@tutanota.com
If no response is received within 12 hours contact: acookies@onionmail.org

ID:16052022UFxfxS3T5132af
请问怎么处理呢

zsq718

有备份就直接恢复，没有就花钱消灾。
荣幸中过异常勒索病毒，数据全无。后来就养成了定时备份的习惯。常用管理员权限的账号密码都是非常见字符。都手工写在小本本上面。

thekfjie

起码要将病毒文件或者名字特征啥的讲一下吧

cheny12120

服务器有数据备份吧，直接数据恢复就好啦

yangji520

Mallox，没有解密工具，没有备份的话，找找有没有数据恢复公司吧

房州波哥

这么严重的问题，可能25刀都没搞不定

kylinbr

https://www.nomoreransom.org/crypto-sheriff.php?lang=en
了解哪种勒索软件类型，根据勒索病毒的特征，上传感染文件，下载解密工具

kylinbr

avast_decryptor_targetcompany64.exe
https://www.aliyundrive.com/s/7Fx474oec8j 提取码：Gy7O
这是我根据你的邮件地址，弄的解密工具，你试试

houyajie

文件后缀查一下  目前传播的大部分无解

dswuying

我这中的也是同一个。邮件地址一样。不过我有备份。直接还原了