UFFICIALE Conoscere i Ransomware e tentare Il ripristino dei files criptati

Il cecchino Jackson · 10 Giugno 2016

jack007 ha detto:
Si tim mi manda le fattura ogni mese.. adesso gli chiamo e disattivo il servizio.

ecco il mittente [TABLE="class: mailread_table, width: 100%"]
[TR]
[TD="class: td1, align: right"]Da:[/TD]
[TD]Telecom Italia-TIM (servizioclienti@telecomitalia.it) [/TD]
[/TR]
[/TABLE]

fermati
leggi qui Campagna phishing bersaglia gli utenti Telecom Italia

cmq se hai uno smartphone le bollette le vedi anche dall'app mytimfisso

- - - Updated - - -

in pratica il mittente può essere identico, ma bisogna controllare l'header..per farlo si trovano delle guide online, io mai provato

- - - Updated - - -

BaldosArts ha detto:
Nel frattempo stiamo iniziando ad installare Malwarebyte antiransomware e CryptoPrevent su tutti i pc, sperando che serva a qualcosa

ho dimenticato di chiedere: possono coesistere insieme nello stesso pc?

test non ne posso fare per ora, dovre eliminare la partizione con w10. non è sicuro fare test su macchine che contengano cmq dati personali perchè ora pare ci siano ransomware che errivano assieme ad altri programmi che ti rubano info,mi hanno detto su un forum inglese gente che fa test quasi quotidianamente (e io su quella partizione devo tenere il mio account MS per ricevere le build insiders)

BaldosArts · 10 Giugno 2016

certo che possono coesistere: malwarebyte è in realtime (intercetta i processi) mentre cryptoprevent modifica solo le policies per disabilitare certi eseguibili da certe cartelle (si avvia una volta e poi non più).
Li ho già a casa e l'unica cosa che può dare problemi è un'impostazione troppo invasiva di cryptoprevent che potrebbe bloccare anche programmi buoni

Il cecchino Jackson · 11 Giugno 2016

ho letto bene anche di winantiransom ma solo a pagamento, non credo di averlo mai letto qui

- - - Updated - - -

News

-nuove varianti jigsaw e decrypt già aggiornato

-stessa cosa per nemucod

-nuovi ransomwares

-crySIS: un nuovo ransom che se no frega dell'UAC http://youtu.be/3U1X9DMNREs

http://www.bleepingcomputer.com/news/security/the-week-in-ransomware-june-10-2016-crysis-teslacrypt-nemucod-and-more/

BaldosArts · 11 Giugno 2016

... sempre peggio...

Il cecchino Jackson · 14 Giugno 2016

Shadow defender giveaway
https://giveaway.download.hr/windows/shadow-defender

con questo siete quasi invincibili . no aggiornamenti gratis

- - - Updated - - -

Nuovo decryptor disponibile

Decryptor for the Apocalypse Ransomware released by Emsisoft

- - - Updated - - -

ATTENZIONE ATTENZIONE!!!

Un nuovo ransomware senza eseguibile , cripta direttamente il file .js
e ruba le pw presenti nel PC !!!

The new RAA Ransomware is created entirely using Javascript

jack007 · 14 Giugno 2016

il file .js è quello preso da me circa una settima fa..

Mustang87 · 14 Giugno 2016

non avevo fatto caso a questa discussione..
Ragazzi sapete se in quest'ultimo mese è uscito un tool per decryptare i file .cerber?

Il cecchino Jackson · 15 Giugno 2016

ATTENZIONE ATTENZIONE

ora i ransomwares sbarcano sulle Smart TV Il ransomware FLocker arriva sugli Smart TV - Ransomware Blog

- - - Updated - - -

ATTENZIONE ATTENZIONE

nuovo decrypt universale per tutte le versioni di teslacrypt e alphacrypt

Come decriptare qualsiasi versione di TeslaCrypt con Cisco Talos Decryption Tool - Ransomware Blog

BaldosArts · 24 Giugno 2016

Mi è finalmente arrivata la mail farlocca della TIM !! vi sposto le immagini:

Sorgente:

From - Fri Jun 24 17:47:49 2016
X-Account-Key: account1
X-UIDL: 9567
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <clienti@tim.it>
Original-Recipient: rfc822;<miaemail>
Received: from smtp105.alice.it (10.192.86.69) by cpms-12a5.cp.alice.it (8.6.142)
id 5707A614047F3F23 for <miaemail>; Fri, 24 Jun 2016 08:55:21 +0200
Received: from mail.velug.it (151.22.76.230) by smtp105.alice.it (8.6.060.43)
id 5715DB1410B3469E for <miaemail>; Fri, 24 Jun 2016 08:55:21 +0200
Received: from zippo.velug.it (localhost [127.0.0.1])
by mail.velug.it (Postfix) with ESMTP id 8F62B2005EB56
for <miaemail>; Fri, 24 Jun 2016 08:48:52 +0200 (CEST)
Content-Type: multipart/related; boundary="===============0658155582=="
MIME-Version: 1.0
Subject: Fattura TIM linea Fissa - Giugno 2016 - scadenza 24/06/2016
From: Telecom Italia-TIM <clienti@tim.it>
To: <miaemail>
Message-Id: <20160624064852.8F62B2005EB56@mail.velug.it>
Date: Fri, 24 Jun 2016 08:48:52 +0200 (CEST)

--===============0658155582==
Content-Type: multipart/alternative; boundary="===============0364723558=="
MIME-Version: 1.0

--===============0364723558==
Content-Type: text/html; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

<html><head></head><body><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><title>Untitled</title> </head><body><table border="0" cellpadding="0" cellspacing="0" width="683" bgcolor="#FFFFFF" align="center"> <tr valign="top"><td colspan="4" height="115"><img src="cid:image2" width="683" height="96" vspace="5" alt=""/> </td></tr></table><table align="center" bgcolor="#ffffff" cellpadding="0" cellspacing="0" width="683">
<tbody>
<tr>
<td width="20">
 </td>
<td>
Gentile <miaemail>, 
 
ti informiamo che la tua fattura TIM di Giugno 2016 relativa alla linea 0039485 è stata appena emessa ed è disponibile online.</td>
<td width="20">
 </td>
</tr>
<tr valign="top">
<td align="center" colspan="3" height="60">
 
<a href="http://www.cemeterydepot.com/img/k/.T1m/k/dw1381" title="accedi al servizio">Si prega di scaricare il fattura <a/>
 
</td>
</tr>
<tr valign="top">
<td width="20">
 </td>
<td>


Ti ricordiamo che in MyTIM Fisso nella sezione Il mio profilo puoi richiedere di ricevere la fattura TIM esclusivamente online. Risparmierai così le spese di spedizione postale. 
 
Ti aspettiamo presto su <a target="_blank" href="https://www.tim.it" Cleaned="color: #e0001a; text-decoration: none">www.tim.it</a>

<a target="_blank" Cleaned="color: #e0001a; text-decoration: none">Grazie</a> 
 

Servizio Clienti tim.it 
 
</td>
<td width="20">
 </td>
</tr>
</tbody>
</table>

 
<table border="0" cellpadding="0" cellspacing="0" width="683" bgcolor="#FFFFFF" align="center"> <tr><td colspan="4"><div align="right"><img src="cid:image1" width="683" height="25" alt=""/> Attenzione:ti invitiamo a non rispondere a questo messaggio: questa casella di posta elettronica non &egrave abilitata alla ricezione. </div></td></tr><tr><td></td></tr></table></body></html></body></html>
--===============0364723558==--
--===============0658155582==
Content-Type: image/gif
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-ID: <image1>
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--===============0658155582==
Content-Type: image/gif
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-ID: <image2>
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--===============0658155582==--

- - - Updated - - -

Questa quella vera della TIM

Sorgente:

From - Mon Jun 20 17:57:34 2016
X-Account-Key: account1
X-UIDL: 9529
X-Mozilla-Status: 1001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <servizioclienti@telecomitalia.it>
Received: from smtp212-alice.alice.it (10.192.86.89) by cpms-12a5.cp.alice.it (8.6.142)
id 5707A61404424592 for <mia email>; Mon, 20 Jun 2016 08:22:30 +0200
Received: from smtpout-ebill.telecomitalia.it (217.169.121.6) by smtp212-alice.alice.it (8.6.060.43)
id 54819C8805123BCA for <mia email>; Mon, 20 Jun 2016 08:22:30 +0200
Received: from ESEBFAS7.telecomitalia.local (10.22.51.143) by
smtpout-ebill.telecomitalia.it (10.19.10.82) with Microsoft SMTP Server id
14.3.224.2; Mon, 20 Jun 2016 08:22:29 +0200
From: Telecom Italia-TIM <servizioclienti@telecomitalia.it>
To: <mia email>
Message-ID: <2067892688.1899.1466403749410.JavaMail.ebpf@ESEBFAS7.telecomitalia.local>
Subject: Fattura TIM linea Fissa - Giugno 2016 - scadenza 08/07/2016
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: 7bit
X-IDProcesso: RES-72672669;Reply-To:contonline@telecomitalia.it;
Date: Mon, 20 Jun 2016 08:22:29 +0200

<html><head></head><body><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><title>Untitled</title>
</head><body><table border="0" cellpadding="0" cellspacing="0" width="683" bgcolor="#FFFFFF" align="center">
<tr valign="top"><td colspan="4" height="115"><img src="https://mytimfisso.tim.it/sites/all/themes/pti_digital/images/logo_mail1.png" width="683" height="96" vspace="5" alt=""/>
</td></tr></table><table align="center" bgcolor="#ffffff" cellpadding="0" cellspacing="0" width="683">
<tbody>
<tr>
<td width="20">
 </td>
<td>
Gentile BALDONI MASSIMO, 
 
ti informiamo che la tua fattura TIM di Giugno 2016 relativa alla linea 071731520 è stata appena emessa ed è già disponibile online.</td>
<td width="20">
 </td>
</tr>
<tr valign="top">
<td align="center" colspan="3" height="60">

 

<a href="https://mytimfisso.tim.it/mytimprivato/login187adv?destination=mytimfisso/elenco_fatture" target="_blank" title="accedi al servizio"><img alt="accedi al servizio" border="0" height="34" src="http://www.187.alice.it/di/187/img/ITA/CoL187/but_accedialservizio.gif" vspace="10" width="188" /> </a>

 
</td>
</tr>
<tr valign="top">
<td height="128" width="20">
 </td>
<td>

Ti ricordiamo alcuni vantaggi del Conto Online: 
 
- Assistenza 24 ore su 24 su tutte le tematiche relative alla linea e alle fatture di TIM. 
 
- Possibilità di inoltrare richieste e segnalazioni veloci direttamente online senza tempi di attesa al telefono, ottenendo una risposta entro 24 ore. 
 
- Opportunità di visualizzare il dettaglio di tutte le chiamate e lo stato delle tue richieste

Se vuoi nuovamente ricevere la tua fattura TIM in formato cartaceo, puoi richiederlo in MyTIM Fisso, sezione La tua linea del sito <a href="https://www.tim.it" style="color: #e0001a; text-decoration: none">www.tim.it</a><a href="http://www.187.it" style="color: #e0001a; text-decoration: none" target="_blank" title="www.187.it">.</a>

Ti aspettiamo presto su <a href="https://www.tim.it" style="color: #e0001a; text-decoration: none">www.tim.it</a>.

<a href="http://www.telecomitalia.it" style="color: #e0001a; text-decoration: none">Grazie</a>. 
 
 
MyTIM Fisso
</td>
<td width="20">
 </td>
</tr>
</tbody>
</table>

 
<table border="0" cellpadding="0" cellspacing="0" width="683" bgcolor="#FFFFFF" align="center">
<tr><td colspan="4"><div align="right">
 
Attenzione: ti invitiamo a non rispondere a questo messaggio: questa casella di posta elettronica non è abilitata alla ricezione.
</div></td></tr><tr><td><img src="http://www.187.alice.it/di/187/img/ITA/CoL187/1x1.gif" width="20" height="1" alt=""/>
</td><td><img src="http://www.187.alice.it/di/187/img/ITA/CoL187/1x1.gif" width="243" height="1" alt=""/>
</td><td><img src="http://www.187.alice.it/di/187/img/ITA/CoL187/1x1.gif" width="180" height="1" alt=""/>
</td><td><img src="http://www.187.alice.it/di/187/img/ITA/CoL187/1x1.gif" width="20" height="1" alt=""/>
</td></tr></table></body></html></body></html>

darkside473 · 24 Giugno 2016

come sono lenti questi malfattori...ancora col vecchio logo TIM:patpat:

BaldosArts · 24 Giugno 2016

si ma è da parecchio che gira... solo gli utenti attenti riconoscono le email fasulle, MOLTI cliccano senza pensarci
ormai sono quasi diventato email-fobico !! leggo attentamente l'oggetto e il testo due volte

SilentRage · 25 Giugno 2016

Mi servirebbe una mano per cercare di recuperare i file su un portatile infettato un certo tipo di Ransomware.

Praticamente aprendo uno zip da una mail fasulla (da quel che mi hanno detto) alcuni file sono stati zippati con estensione .bart e resi invisibili, ovviamente viene chiesta una password per l'estrazione. Non c'è nessuna pagina che chiede il riscatto.Secondo voi come posso muovermi ? Almeno capire di che tipo di Ransomware si tratta e toglierlo, anche se MSE e Kaspersky mi segna il pc completamente pulito...

Grazie in anticipo

Il cecchino Jackson · 25 Giugno 2016

BaldosArts ha detto:
Mi è finalmente arrivata la mail farlocca della TIM !! vi sposto le immagini:

Visualizza allegato 209025

Sorgente:

From - Fri Jun 24 17:47:49 2016
X-Account-Key: account1
X-UIDL: 9567
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <clienti@tim.it>
Original-Recipient: rfc822;<miaemail>
Received: from smtp105.alice.it (10.192.86.69) by cpms-12a5.cp.alice.it (8.6.142)
id 5707A614047F3F23 for <miaemail>; Fri, 24 Jun 2016 08:55:21 +0200
Received: from mail.velug.it (151.22.76.230) by smtp105.alice.it (8.6.060.43)
id 5715DB1410B3469E for <miaemail>; Fri, 24 Jun 2016 08:55:21 +0200
Received: from zippo.velug.it (localhost [127.0.0.1])
by mail.velug.it (Postfix) with ESMTP id 8F62B2005EB56
for <miaemail>; Fri, 24 Jun 2016 08:48:52 +0200 (CEST)
Content-Type: multipart/related; boundary="===============0658155582=="
MIME-Version: 1.0
Subject: Fattura TIM linea Fissa - Giugno 2016 - scadenza 24/06/2016
From: Telecom Italia-TIM <clienti@tim.it>
To: <miaemail>
Message-Id: <20160624064852.8F62B2005EB56@mail.velug.it>
Date: Fri, 24 Jun 2016 08:48:52 +0200 (CEST)

--===============0658155582==
Content-Type: multipart/alternative; boundary="===============0364723558=="
MIME-Version: 1.0

--===============0364723558==
Content-Type: text/html; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

<html><head></head><body><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><title>Untitled</title> </head><body><table border="0" cellpadding="0" cellspacing="0" width="683" bgcolor="#FFFFFF" align="center"> <tr valign="top"><td colspan="4" height="115"><img src="cid:image2" width="683" height="96" vspace="5" alt=""/> </td></tr></table><table align="center" bgcolor="#ffffff" cellpadding="0" cellspacing="0" width="683">
<tbody>
<tr>
<td width="20">
 </td>
<td>
Gentile <miaemail>, 
 
ti informiamo che la tua fattura TIM di Giugno 2016 relativa alla linea 0039485 è stata appena emessa ed è disponibile online.</td>
<td width="20">
 </td>
</tr>
<tr valign="top">
<td align="center" colspan="3" height="60">
 
<a rel="nofollow" href="http://www.cemeterydepot.com/img/k/.T1m/k/dw1381" title="accedi al servizio">Si prega di scaricare il fattura <a/>
 
</td>
</tr>
<tr valign="top">
<td width="20">
 </td>
<td>


Ti ricordiamo che in MyTIM Fisso nella sezione Il mio profilo puoi richiedere di ricevere la fattura TIM esclusivamente online. Risparmierai così le spese di spedizione postale. 
 
Ti aspettiamo presto su <a rel="nofollow" target="_blank" href="https://www.tim.it" Cleaned="color: #e0001a; text-decoration: none">www.tim.it</a>

<a target="_blank" Cleaned="color: #e0001a; text-decoration: none">Grazie</a> 
 

Servizio Clienti tim.it 
 
</td>
<td width="20">
 </td>
</tr>
</tbody>
</table>

 
<table border="0" cellpadding="0" cellspacing="0" width="683" bgcolor="#FFFFFF" align="center"> <tr><td colspan="4"><div align="right"><img src="cid:image1" width="683" height="25" alt=""/> Attenzione:ti invitiamo a non rispondere a questo messaggio: questa casella di posta elettronica non &egrave abilitata alla ricezione. </div></td></tr><tr><td></td></tr></table></body></html></body></html>
--===============0364723558==--
--===============0658155582==
Content-Type: image/gif
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-ID: <image1>
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--===============0658155582==
Content-Type: image/gif
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-ID: <image2>
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--===============0658155582==--

- - - Updated - - -

Questa quella vera della TIM

Visualizza allegato 209026

Sorgente:

From - Mon Jun 20 17:57:34 2016
X-Account-Key: account1
X-UIDL: 9529
X-Mozilla-Status: 1001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <servizioclienti@telecomitalia.it>
Received: from smtp212-alice.alice.it (10.192.86.89) by cpms-12a5.cp.alice.it (8.6.142)
id 5707A61404424592 for <mia email>; Mon, 20 Jun 2016 08:22:30 +0200
Received: from smtpout-ebill.telecomitalia.it (217.169.121.6) by smtp212-alice.alice.it (8.6.060.43)
id 54819C8805123BCA for <mia email>; Mon, 20 Jun 2016 08:22:30 +0200
Received: from ESEBFAS7.telecomitalia.local (10.22.51.143) by
smtpout-ebill.telecomitalia.it (10.19.10.82) with Microsoft SMTP Server id
14.3.224.2; Mon, 20 Jun 2016 08:22:29 +0200
From: Telecom Italia-TIM <servizioclienti@telecomitalia.it>
To: <mia email>
Message-ID: <2067892688.1899.1466403749410.JavaMail.ebpf@ESEBFAS7.telecomitalia.local>
Subject: Fattura TIM linea Fissa - Giugno 2016 - scadenza 08/07/2016
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: 7bit
X-IDProcesso: RES-72672669;Reply-To:contonline@telecomitalia.it;
Date: Mon, 20 Jun 2016 08:22:29 +0200

<html><head></head><body><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><title>Untitled</title>
</head><body><table border="0" cellpadding="0" cellspacing="0" width="683" bgcolor="#FFFFFF" align="center">
<tr valign="top"><td colspan="4" height="115"><img src="https://mytimfisso.tim.it/sites/all/themes/pti_digital/images/logo_mail1.png" width="683" height="96" vspace="5" alt=""/>
</td></tr></table><table align="center" bgcolor="#ffffff" cellpadding="0" cellspacing="0" width="683">
<tbody>
<tr>
<td width="20">
 </td>
<td>
Gentile BALDONI MASSIMO, 
 
ti informiamo che la tua fattura TIM di Giugno 2016 relativa alla linea 071731520 è stata appena emessa ed è già disponibile online.</td>
<td width="20">
 </td>
</tr>
<tr valign="top">
<td align="center" colspan="3" height="60">

 

<a rel="nofollow" href="https://mytimfisso.tim.it/mytimprivato/login187adv?destination=mytimfisso/elenco_fatture" target="_blank" title="accedi al servizio"><img alt="accedi al servizio" border="0" height="34" src="http://www.187.alice.it/di/187/img/ITA/CoL187/but_accedialservizio.gif" vspace="10" width="188" /> </a>

 
</td>
</tr>
<tr valign="top">
<td height="128" width="20">
 </td>
<td>

Ti ricordiamo alcuni vantaggi del Conto Online: 
 
- Assistenza 24 ore su 24 su tutte le tematiche relative alla linea e alle fatture di TIM. 
 
- Possibilità di inoltrare richieste e segnalazioni veloci direttamente online senza tempi di attesa al telefono, ottenendo una risposta entro 24 ore. 
 
- Opportunità di visualizzare il dettaglio di tutte le chiamate e lo stato delle tue richieste

Se vuoi nuovamente ricevere la tua fattura TIM in formato cartaceo, puoi richiederlo in MyTIM Fisso, sezione La tua linea del sito <a rel="nofollow" href="https://www.tim.it" style="color: #e0001a; text-decoration: none">www.tim.it</a><a rel="nofollow" href="http://www.187.it" style="color: #e0001a; text-decoration: none" target="_blank" title="www.187.it">.</a>

Ti aspettiamo presto su <a rel="nofollow" href="https://www.tim.it" style="color: #e0001a; text-decoration: none">www.tim.it</a>.

<a rel="nofollow" href="http://www.telecomitalia.it" style="color: #e0001a; text-decoration: none">Grazie</a>. 
 
 
MyTIM Fisso
</td>
<td width="20">
 </td>
</tr>
</tbody>
</table>

 
<table border="0" cellpadding="0" cellspacing="0" width="683" bgcolor="#FFFFFF" align="center">
<tr><td colspan="4"><div align="right">
 
Attenzione: ti invitiamo a non rispondere a questo messaggio: questa casella di posta elettronica non è abilitata alla ricezione.
</div></td></tr><tr><td><img src="http://www.187.alice.it/di/187/img/ITA/CoL187/1x1.gif" width="20" height="1" alt=""/>
</td><td><img src="http://www.187.alice.it/di/187/img/ITA/CoL187/1x1.gif" width="243" height="1" alt=""/>
</td><td><img src="http://www.187.alice.it/di/187/img/ITA/CoL187/1x1.gif" width="180" height="1" alt=""/>
</td><td><img src="http://www.187.alice.it/di/187/img/ITA/CoL187/1x1.gif" width="20" height="1" alt=""/>
</td></tr></table></body></html></body></html>

Ciao, posso chiederti come hai ottenuto la sorgente e che provider di email usi? Grazie

Mursey · 25 Giugno 2016

SilentRage ha detto:
Mi servirebbe una mano per cercare di recuperare i file su un portatile infettato un certo tipo di Ransomware.

Praticamente aprendo uno zip da una mail fasulla (da quel che mi hanno detto) alcuni file sono stati zippati con estensione .bart e resi invisibili, ovviamente viene chiesta una password per l'estrazione. Non c'è nessuna pagina che chiede il riscatto.Secondo voi come posso muovermi ? Almeno capire di che tipo di Ransomware si tratta e toglierlo, anche se MSE e Kaspersky mi segna il pc completamente pulito...

Grazie in anticipo

Per capire che ransomware e' puoi usare il link che e' presente nella prima pagina della discussione
https://id-ransomware.malwarehunterteam.com/

BaldosArts · 25 Giugno 2016

Il cecchino Jackson ha detto:
Ciao, posso chiederti come hai ottenuto la sorgente e che provider di email usi? Grazie

Per la sorgente basta cliccare col tasto destro sul messaggio -> proprietà (su windows live mail) / tasto ALTRO -> visualizza sorgente su Thunderbird.
Uso Mozilla Thunderbird come client di posta.
L'email è arrivata su un indirizzo @alice.it

UFFICIALE Conoscere i Ransomware e tentare Il ripristino dei files criptati

Il cecchino Jackson

Ospite

BaldosArts

Il cecchino Jackson

Ospite

BaldosArts

Il cecchino Jackson

Ospite

jack007

Mustang87

Nuovo Utente

Il cecchino Jackson

Ospite

BaldosArts

Allegati

darkside473

Utente Attivo

BaldosArts

SilentRage

Utente Attivo

Il cecchino Jackson

Ospite

Mursey

Ospite

BaldosArts