虽然病毒会破坏系统，但勒索软件(Ransomware)做得更糟。这些流氓程序可以加密您的文件，让您零访问。如果您没有备份，那么解决此问题的唯一方法是向勒索软件的作者付款，或者(Ransomware)查看是否已发布勒索软件解密工具。(Ransomware Decryption Tool)McAfee开发了 McAfee Ransomware Recover ( Mr 2 )，这是一个可以帮助解密已被Ransomware解密的文件的框架。
McAfee Ransomware Recover（2先生）
Mr 2是一个工具和平台，不仅可以解锁用户文件、应用程序、数据库和其他加密文件，而且还可供安全社区使用。它可供所有人免费使用。他们可以使用具有解密密钥和解密逻辑的平台来解锁文件。 McAfee承诺在发现新密钥和解密逻辑时保持平台更新。
如何使用 McAfee Ransomware Recover（2先生）(How to use McAfee Ransomware Recover (Mr2))
它是一个命令行工具，并带有一组您必须应用才能解密文件的选项。最好的部分，它们很简单，任何人都可以使用计算机的基本知识来使用它。以下是有用的选项：
- -list –显示(Shows)云上可用的所有解密工具的列表，以及在您的计算机上可用的工具（带有 **）。
- -get - 下载(Download) 给定名称和版本的解密工具。
- -run – 运行解密工具。
现在您已经安装了这个，首先在您的计算机上识别勒索软件的名称。另外，请注意版本号。
然后转到“开始”菜单中的“(Start)程序(Programs)”列表，找到McAfee Ransomware工具。如果您最近安装了它，您也可以在最近安装的程序下找到它。
当您单击它时，它会启动命令提示符。
在这篇文章中，我假设“stampado”是勒索软件的名称，(Ransomware)版本为 1.0.0
当勒索软件(Ransomware)锁定您的文件时，您会看到如下锁定屏幕。
它将告诉您有关已解密的数据，以及在它们永远消失之前您还有多少时间，以及如何与它们连接。如果您付款，他们会发送一个代码来解锁您的所有文件。这就是McAfee Ransomware解密器工具为您做的事情。
如果您仔细注意图像，它有两个关键信息。首先(First)是它要求您连接的电子邮件 ID 。(email-id)其次(Second)是“获取代码(Get the code)？” 盒子。McAfee工具将使用电子邮件 ID 生成代码。其他勒索软件(Ransomware)可能会有所不同。
接下来，按照以下步骤解密文件：
执行命令MfeDecrypt -list（这将显示云上可用的勒索软件(Ransomware)解决方案列表）。
要下载恢复工具，请运行MfeDecrypt -get stampado -ver 1.0.0 。 它还将下载任何依赖项。
要开始解密文件，请运行MfeDecrypt -run stampado -ver 1.0.0 -args “-e [email protected] ”。它与我们从屏幕上记下的电子邮件 ID 相同。
操作成功后，复制密钥，然后粘贴到框中。
单击获取我的文件( Get my files)框，它将自动解锁您的所有文件夹。
勒索软件(Ransomware)解密工具不会将其从您的计算机中删除。它只打开带有键和逻辑的文件。
因此，在此之后，您需要确保使用安全软件删除勒索软件。(Ransomware)
下载 McAfee Ransomware Recover (Mr 2 )(Download McAfee Ransomware Recover (Mr2))
它适用于 32 位和 64 位系统，您可以从此处(from here)(from here)下载。确保您的计算机具有网络连接，并在使用此工具之前使用最新更新更新您的防病毒软件。
如果McAfee Ransomware Recover ( Mr2 ) 帮助您恢复计算机上的文件，请告诉我们。
提示(TIP)：Microsoft 已通过OneDrive为您的文件和文件夹提供勒索软件保护。此功能不仅可以备份您的所有数据，还可以检测您的文件在运行时是否受到影响。如果您使用的是Windows，我们还建议您使用OneDrive 进行勒索软件保护。
McAfee Ransomware Recover (Mr2) can help in decrypting files
While viruses corrupted systems, Ransomware did even worse. These rogue programs can encrypt your files, leaving you with zero access. If you do not have backups, then the only way out of this is to pay money to the authors of the Ransomware or see if a Ransomware Decryption Tool has been released for it. McAfee has developed, McAfee Ransomware Recover (Mr2), a framework which can help in decrypting files which have been decrypted by Ransomware.
McAfee Ransomware Recover (Mr2)
Mr2 is a tool and a platform which not only unlock user files, applications, databases, and other encrypted files but is also available for the security community. It is available for free to everyone. They can use the platform with the decryption keys and decryption logic they have to unlock files. McAfee promises to keep the platform updated as they find new keys and decryption logic.
How to use McAfee Ransomware Recover (Mr2)
Its a command line tool, and comes with a set of options you will have to apply to decrypt the files. Best part, they are simple, and anyone can use it with basic knowledge of using a computer. Here are the useful options:
- -list – Shows list of all decryption tools available on the cloud, and those available on your computer with **.
- -get– Download decryption tool for given name and version.
- -run – Run the decryption tool.
Now that you have this installed, first identify the name of the Ransomware on your computer. Also, note the version number.
Then go to Programs list in the Start menu, and locate the McAfee Ransomware tool. You can also find it under recently installed programs if you installed it recently.
When you click on it, it launches the command prompt.
In this post, I am assuming “stampado” is the name of the Ransomware, with version 1.0.0
When Ransomware locks your files, you get a lock-screen as below.
It will tell you about the data which are decrypted, and how much time you have before they are gone forever, and how to connect with them. If you pay, they send out a code to unlock all your files. That’s what the McAfee Ransomware decryptor tool does for you.
If you notice the image carefully, it has two crucial information. First is the email-id where it asks you to connect. Second is the “Get the code?” box. The McAfee tool will generate the code using the email id. It might be different for other Ransomware.
Next, follow these steps to decrypt the files:
Execute the command MfeDecrypt -list (This will display the list of Ransomware solution available on the cloud).
To download the recovery tool, run MfeDecrypt -get stampado -ver 1.0.0. It will also download any dependencies.
To start decrypting the files run MfeDecrypt -run stampado -ver 1.0.0 -args “-e [email protected]”. Its the same email ID which we noted from the screen.
Once the operation is successful, copy the key, and paste into the box.
Click on Get my files box, and it will automatically unlock all your folders.
The Ransomware decryption tool doesn’t remove it from your computer. It only opens files with keys and logic.
So after this, you need to make sure that you remove the Ransomware using your security software.
Download McAfee Ransomware Recover (Mr2)
It is available for both 32-bit and 64-bit system, and you can download it from here. Make sure your computer has network connectivity, and update your antivirus with the latest update before using this tool.
Let us know if the McAfee Ransomware Recover (Mr2) helped you to recover files on your computer.
TIP: Microsoft has offered Ransomware Protection for your files and folders through OneDrive. Not only this feature backs up all your data, but it can also detect if your files are affected at the run time. If you are on Windows, we also recommend you use OneDrive for Ransomware protection.
