Nhichapụ ransomware ma ọ bụ ihe mberede na Google Drive, OneDrive, ma ọ bụ Dropbox na-emekọrịta faịlụ ndị mebiri emebi na ngwaọrụ niile (Akụkọ ụdị ụbọchị 30 na nlọghachite Vault)¶

Ikiri akara ngosi mmekọrịta na ụlọ ọrụ Windows gị ma ọ bụ mmanya menu macOS na-agba ọsọ ọsọ ọsọ ka puku kwuru puku akwụkwọ azụmahịa, ndekọ ụtụ, foto ezinụlọ na faịlụ isi mmalite dị n'ime. Google Drive for Desktop, Microsoft OneDrive, Dropbox, ma ọ bụ iCloud Drive ezoro ezo site na ransomware (.locked, .bianlian, .akira, .play, .lockbit) ma ọ bụ kpochapu ya site na ahaziri nke ọma rsync --delete, nchekwa na mberede ịdọrọ-na-dobe, ma ọ bụ rogue script bụ nnukwu ọdachi data na-agba ọsọ. N'ihi na a na-emezi ndị ahịa mmekọrịta desktọọpụ igwe ojii maka mmegharị bidirectional ozugbo (inotify na Linux, FSEvents na macOS, na ReadDirectoryChangesW / Cloud Filter API na Windows), ọnụọgụ abụọ ransomware ma ọ bụ mberede Shift + Delete na ** otu kọmpụta nwere nje na-agbasa ozugbo ruo na ihe nkesa igwe ojii wee kwaba ya na ** desktọpụ ọ bụla, laptọọpụ na nchekwa otu ndị ọzọ jikọtara na akaụntụ ahụ *** n'ime sekọnd.

Agbanyeghị, igwe igwe mmekọrịta igwe ojii bụ ** abụghị ihe edegharị diski raw: n'azụ ihe nkiri, Microsoft OneDrive, Dropbox, Google Drive, na Box Jikwaa nchekwa ihe n'akụkụ ihe nkesa na-enweghị mgbanwe yana ** ụbọchị 30 ruo ụbọchị 180 ụdị akụkọ ihe mere eme nke oge n'ime oge , ** Ọgbọ nke abụọ na-emegharị ihe, yana ngwa nkwụghachi ụgwọ akaụntụ ()OneDrive Restore Your OneDrive** na Dropbox Rewind). Ọ bụrụhaala na ị kewapụ kọmputa nje ahụ ozugbo na netwọkụ ahụ, kwụsịtụ mmekọrịta na igwe nke abụọ iji weta cache mpaghara na-anọghị n'ịntanetị, wee zere ọnyà na-egbu egbu nke ibugharị faịlụ ezoro ezo na oke akụkọ ihe mere eme nke ụdị gị, ị nwere ike tụgharịa draịvụ igwe ojii gị niile ozugbo tupu nzuzo ma ọ bụ ihichapụ amalite na-akwụghị otu senti n'ihe mgbapụta. Maka njide igwe malware na ihe osise faịlụ, kpọtụrụ ntuziaka anyị na ya ransomware na malware nzaghachi, ihichapụ faịlụ mberede yana mgbake mbanye ahaziri, na ndabere kọmputa: 3-2-1 atụmatụ na mgbake ọdachi. Ọ bụrụ na mwakpo ransomware dakwasịrị ụlọ ọgwụ, ụlọọgwụ, ma ọ bụ netwọk izipu ihe mberede, mee ka usoro nkwụsịtụ ụlọ ọgwụ na-anọghị n'ịntanetị ozugbo wee kpọọ nọmba mberede mpaghara gị (911 na United States na Canada, 112 gburugburu European Union, 999 na United Kingdom) ma ọ bụ lelee akwụkwọ ndekọ aha anyị nọmba mberede.

Mee nke a ugbu a¶

1. Kwụpụ eriri Ethernet wee gbanyụọ Wi-Fi na kọmputa isi mmalite ozugbo (tupu imechi ngwa ma ọ bụ ịpị ihe ọ bụla):
2. ** Kedu ihe kpatara ịkpụ netwọkụ na-echekwa oghere igwe ojii gị **: Kwa sekọnd ọ bụla nje ma ọ bụ ihichapụ kọmputa na-anọgide na ntanetị, onye ahịa na-emekọrịta ihe na desktọpụ (OneDrive.exe, GoogleDriveFS.exe, Dropbox.exe) na-ebugote 50 ruo 200 ezoro ezo ma ọ bụ ehichapụ ọrụ faịlụ kwa nkeji na ígwé ojii API. Ịcha Wi-Fi na Ethernet na-eme ka ahịrị ebugo igwe ojii na egwu ya.
3. **Gaa na laptọọpụ, desktọpụ, mbadamba na ekwentị ọ bụla jikọtara na otu akaụntụ igwe ojii wee gbanyụọ Wi-Fi / Ethernet ha tupu ịkpọlite ​​ihuenyo ha ***:
4. ** Laptọọpụ gị nke abụọ na-anọghị n'ịntanetị bụ capsule oge pristine ***: Ọ bụrụ na desktọpụ ụlọ gị ma ọ bụ MacBook nke abụọ na-arahụ n'ime akpa gị kemgbe ụnyaahụ, mpaghara ya. OneDrive, Dropbox, ma ọ bụ Google Drive (Mirror files / Always keep on this device) nchekwa ka na-ejide 100% ezoro ezoghị ezo, emetụghị emetụ nke faịlụ gị.
5. Ọ bụrụ na ị teta laptọọpụ nke abụọ ahụ mgbe Wi-Fi dị, igwe ojii sync daemon na-ejikọ ozugbo, budata nhichapụ oke ma ọ bụ ederede ransomware site na sava ahụ, wee bibie akwụkwọ akụkọ mpaghara ahụ n'okpuru 60 sekọnd. Gbanyụọ rawụta Wi-Fi ụlọ gị (wepụ eriri ike ya) tupu ịkpọlite ​​kọmputa nke abụọ ọ bụla, wee detuo folda mpaghara na draịvụ USB dị n'èzí mgbe ị na-anọghị n'ịntanetị.
6. ** Ọ bụrụ na ihe kpatara ya bụ Ransomware, dọrọ eriri ike (ma ọ bụ manye-jide bọtịnụ ike maka sekọnd iri) na PC nwere ọrịa; Ọ bụrụ na ihe kpatara ya bụ nhichapụ mberede na SSD, hapụ ya ka ọ dịpụrụ adịpụ wee tutuo/kwụsị sync daemon ***:
7. **Ransomware ***: ike ịdọrọ na-akwụsị eriri ezoro ezo (AES / ChaCha20 ndị ọrụ) site na izochi folda ndị fọdụrụ na ezoro ezo na draịva mpaghara gị wee chekwaa igodo RAM na-agbanwe agbanwe ma ọ bụrụ na achọrọ nyocha ebe nchekwa ihe.
8. Nhichapụ mberede: Gbuo OneDrive.exe / Dropbox.exe / GoogleDriveFS.exe na Task Manager (Ctrl + Shift + Esc) ma ọ bụ Arụ Ọrụ ozugbo ka onye ahịa mpaghara kwụsị ị kwụ n'ahịrị DELETE Oku API.
9. **Ejikwala aka ihichapụ faịlụ ezoro ezo na ransomware (.locked) na igwe ojii webụsaịtị ma ọ bụrụ na malware degharịrị aha ndọtị faịlụ ***:
10. Ghọta ka ransomware si emekọrịta na nchekwa igwe ojii:
    • Ikpe A: Degharịa n'ime ebe (otu aha faịlụ): ezoro ezoro ezoro ezoro ezo. Tax_2025.xlsx ma chekwaa ụgwọ ọrụ ezoro ezo n'okpuru otu aha ahụ Tax_2025.xlsx. N'ebe a, ọrụ igwe ojii na-ewere faịlụ ezoro ezo dị ka ** Ụdị 2 **, ebe faịlụ mbụ gị dị ọcha na-anọdụ ala n'enweghị nsogbu dị ka ** Ụdị 1 ** na Version History.
    • ** Ikpe B: Kpọgharia aha + Hichapụ nke izizi (Tax_2025.xlsx.lockbit***: Ọtụtụ ihe mgbapụta nke ọgbara ọhụrụ na-agụ Tax_2025.xlsx, na-ede faịlụ ọhụrụ aha ya bụ Tax_2025.xlsx.lockbit, na ehichapụ nke izizi Tax_2025.xlsx. Ebe a, izizi gị dị ọcha Tax_2025.xlsx na-anọdụ ala n'ime ** igwe ahịhịa ahịhịa / ihe eji emegharị ihe ** (na nlọghachi akaụntụ n'oge).
11. ** Banye n'ime ọnụ ụzọ webụ igwe ojii (onedrive.live.com, dropbox.com, drive.google.com, icloud.com) sitere na ngwaọrụ dị ọcha, na-adịghị agwụ agwụ (dị ka smartphone na data ekwentị ma ọ bụ kọmputa dịpụrụ adịpụ)**:
12. Abanyela n'ime akaụntụ igwe ojii gị site na kọmpụta butere ọrịa ransomware, ozugbo ** kagbuo nnọkọ ngwaọrụ OAuth nke kọmpụta ahụ butere** n'okpuru ibe nchekwa Akaụntụ Google, Microsoft ma ọ bụ Dropbox ka PC nwere ọrịa enweghị ike ịmaliteghachi mmekọrịta ma mmadụ tụgharịa ya azụ.
13. **Jiri Mgbanwe Akaụntụ n'ime oge (Restore your OneDrive ma ọ bụ Dropbox Rewind) kama iweghachi faịlụ 50,000 otu otu ***:
14. Ma Microsoft OneDrive na Dropbox gụnyere igwe oge akaụntụ na-akpaghị aka nke na-atụgharị folda ọ bụla, ụdị faịlụ na ihe ehichapụrụ n'ofe draịva gị niile laghachi azụ na stampụ oge.1 hour ago, Yesterday at 11:00 PM, ma ọ bụ ruo 30 to 180 days ago) na otu ihe nkesa na-arụ ọrụ.

Osisi mkpebi: igwe ojii na-emekọrịta ọdachi na mgbake n'ime oge¶

Mee usoro ọrụ mberede a iji kwụsị mgbasa mmekọrịta ngwaọrụ ma weghachi ọnọdụ igwe ojii gị dị ọcha:

flowchart TD
    Start["Mkpuchi Ransomware ma ọ bụ Mmekọrịta mkpochapụ oke mberede n'ofe igwe ojii"] --> CutNet["Nzọụkwụ 1: Kwụpụ Ethernet & Gbanyụọ Wi-Fi na Kọmputa Isi Iyi ozugbo (ma ọ bụ gbanyụọ Wi-Fi Router Power Cord)"]

    CutNet --> SaveSecondaries["Nzọụkwụ 2: Debe Laptọọpụ / PC niile na-anọghị n'ịntanetị (Ụdị ụgbọ elu) -> Detuo nchekwa nchekwa 'OneDrive / Dropbox / Google Drive' nke mpaghara ha na draịvụ USB mpụga."]

    SaveSecondaries --> RevokeSession["Nzọụkwụ 3: Site na Ekwentị / Ihe Nchọgharị Dị Ọcha, Mepee Nchebe Akaụntụ (Google / Microsoft / Dropbox) -> Wepụ / Mepee Njikọ Mmekọrịta PC nke Desktọpụ Ọrịa."]

    RevokeSession --> WhichCloud{"Kedu Platform Nchekwa Urukpuru ka kụrụ?"}

    WhichCloud -->|"Microsoft OneDrive / SharePoint (Nkeonwe ma ọ bụ Microsoft 365)"| OneDriveRestore["Jiri 'Ntọala -> Nhọrọ -> Weghachite OneDrive gị' (Rolls Back All Edits, Renames, & Deletions Gafe Akaụntụ niile ruo ụbọchị 30) + Lelee 1st & 2nd-Stage Recycle Bin"]

    WhichCloud -->|"Dropbox (Plus, ezinụlọ, ọkachamara, azụmahịa, ma ọ bụ ihe ndabere)"| DropboxRestore["Jiri 'Dropbox Rewind' na Root nchekwa (na-eweghachite Akaụntụ niile ka ọ bụrụ nkeji nkeji tupu mwakpo) ma ọ bụ jiri 'faịlụ ehichapụ' + 'Emmemme' Log (Ụbọchị 30 ruo 180)"]

    WhichCloud -->|"Google mbanye (Gmail nkeonwe ma ọ bụ Google Workspace)"| GDriveRestore["1. Hazie 'mkpofu' site na 'ụbọchị a kposara' ka ọ bụrụ nnukwu eweghachi ehichapụ. 2. Maka faịlụ edegharịrị: Pịa aka nri -> 'ozi faịlụ -> Jikwaa ụdị' ma ọ bụ Gbaa Google Drive API v3 Nnukwu Ndozigharị Rollback Script"]

    WhichCloud -->|"Apple iCloud mbanye"| iCloudRestore["Banye n'ime 'iCloud.com/recovery' -> Pịa 'Weghachi faịlụ' (naghachite faịlụ ehichapụ n'ime ụbọchị 30 gara aga, ọbụlagodi ma ọ bụrụ na ewepụrụ ya na nso nso a)"]

Nkeji 1: Otu igwe mmekọrịta igwe ojii si ahazi ransomware vs. mkpochapụ (Ebe faịlụ gị dị ọcha dị ndụ n'ezie)¶

Tupu ịpị bọtịnụ weghachi na ụjọ, lelee ** ka esi gbanwee faịlụ gị na portal webụ igwe ojii (drive.google.com, onedrive.live.com, ma ọ bụ dropbox.com). Ihe omume mmekọrịta igwe ojii ọ bụla dabara na otu n'ime ụkpụrụ teknụzụ atọ:

Usoro 2: Nchigharị igwe ojii site na ikpo okwu na mgbake ụdị buru ibu¶

Soro usoro mgbake maka onye na-eweta igwe ojii gị site na ihe nchọgharị ** dị ọcha, enweghị ọrịa**.

1. Microsoft OneDrive & SharePoint Online (Restore Your OneDrive & 2-Stage Recycle Bin)¶

Microsoft rụpụtara OneDrive kpọmkwem ka ọ lanarị izo ya ezo na mkpochapụ mmekọrịta ọtụtụ mmadụ:

1. ** Usoro A: Ndaghachi n'ime oge Akaụntụ niile (Restore your OneDrive***:
2. Dị na Microsoft 365 Personal, Family, Business, and Enterprise (SharePoint Online ọba akwụkwọ):
3. Banye na onedrive.live.com (ma ọ bụ Microsoft 365 OneDrive web portal) na kọmputa dị ọcha.
4. Pịa akara ngosi ** Ntọala Gear *** (akụkụ aka nri) -> họrọ Options -> pịa Restore your OneDrive na pane igodo aka ekpe (na saịtị otu SharePoint, pịa Settings Gear -> Restore this library).
5. N'okpuru Select a date, họrọ Yesterday (ma ọ bụ Custom date and time).
6. Lelee ** Ihe omume Histogram Bar Chart ***: ị ga-ahụ nnukwu mkpọ na usoro iheomume na-aka akara kpọmkwem nkeji nzuzo ma ọ bụ nhichapụ ihe mgbapụta malitere.
7. Dọrọ ihe mmịfe usoro iheomume gaa n'akụkụ aka ekpe nke spike ahụ** (ya mere, a na-enyocha aha faịlụ ọjọọ ọ bụla, degharịa, na ihichapụ nke emepụtara mgbe nkeji ahụ ga-emezigharị).
8. Pịa Restore . Sava Microsoft ga-emegharị mgbanwe faịlụ ọ bụla ozugbo, hichapụ ihe mgbapụta emepụtara ọhụrụ .locked faịlụ, ma weghachite faịlụ mbụ niile ehichapụrụ na nhazi nchekwa ha kpọmkwem site na tupu ihe ahụ emee.
9. ** Usoro B: Ihe e zoro ezo "Ọkpụkpọ ihe eji emegharị ihe nke abụọ" (Mgbe a tọpụrụ ihe eji emegharị ihe)**:
10. Kedu ihe ma ọ bụrụ na onye na-awakpo (ma ọ bụ edemede akpaaka) abanye na interface weebụ OneDrive/SharePoint wee pịa Empty recycle bin?
11. Na OneDrive maka Azụmaahịa / SharePoint Online (na akaụntụ Microsoft 365), ịwepu ihe eji emegharị ihe bụ isi ** anaghị ehichapụ faịlụ gị *. Kama, ọ na-ebuga ha n'ime ebe zoro ezo ** Nkebi nke abụọ recycle Bin (Site Collection Recycle Bin) ebe a na-echekwa ha ruo ụbọchị 93 ngụkọta ***:
    1. Mepee Recycle bin n'akụkụ aka ekpe nke OneDrive.
    2. Pịgharịa gaa na ala nke ibe ahụ wee pịa obere njikọ ọgụgụ: Can't find what you're looking for? Check the Second-stage recycle bin .
    3. Họrọ faịlụ niile wee pịa Restore .

2. Dropbox (Dropbox Rewind, Events Rollback, na Deleted Files)¶

1. ** Usoro A: Iji Dropbox Rewind Ka iweghachite folda niile ma ọ bụ akaụntụ gị niile ***:
2. Dị na Dropbox Plus, ezinụlọ, ndị ọkachamara na atụmatụ azụmahịa (30 days ka 180 days anya azụ):
3. Banye na dropbox.com na ihe nchọgharị dị ọcha.
4. Ka iweghachite akaụntụ Dropbox gị niile n'otu oge, fegharịa n'elu All files nkụnye eji isi mee (ma ọ bụ pịa ... (Ihe omume ndị ọzọ) menu dị n'akụkụ aka nri aka nri mgbe ahọpụtara nchekwa ọ bụla) wee pịa Rewind this folder (ma ọ bụ Rewind Dropbox).
5. Pịa Get started -> lelee eserese ihe omume kwa ụbọchị ka ịchọta mkpọ mgbe ihe mgbapụta ma ọ bụ nhichapụ mere -> pịa ụbọchị ahụ ka ịbuba n'ime usoro iheomume ** elekere kwa elekere / nkeji na nkeji**.
6. Debe ahịrị kwụ ọtọ na-acha anụnụ anụnụ naanị ** tupu ihe omume ọjọọ amalite, pịa Continue, wee pịa Rewind .
7. Dropbox ga-atụgharị faịlụ niile edegharịrị, hichapụ ndetu ihe mgbapụta ọhụrụ agbakwunyere, wee bilite nchekwa niile ehichapụrụ n'ọnọdụ.
8. ** Usoro B: Kedu ihe ma ọ bụrụ na ịnọ n'efu Dropbox Basic akaụntụ (ebe Dropbox Rewind akpọchiri)?**
9. ** Ihe dị mkpa ***: Ọbụlagodi na efu Dropbox Basic Akaụntụ (2 GB), **Dropbox ka na-ejigide ụbọchị 30 zuru oke Version History na ụbọchị 30 Deleted Files mgbake maka faịlụ ọ bụla na sava ha ***.
10. Nhọrọ 1 (Nweghachi akwụkwọ ntuziaka efu): Pịa Deleted files n'akụkụ aka ekpe nke dropbox.com iji nyochaa site na ụbọchị na nnukwu-weghachite izizi ehichapụrụ; ma ọ bụ pịa ... -> Activity -> Version history na faịlụ ọ bụla edegharịrị iji weghachi nlegharị anya dị ọcha gara aga.
11. Nhọrọ 2 (Ozugbo Dropbox Plus Mkpọghe nkwalite): N'ihi na Dropbox na-edekọ ndekọ ihe omume dị n'okpuru na akaụntụ niile n'agbanyeghị ọkwa, kwalite a Dropbox Basic akaụntụ na Dropbox Plus ($11.99 maka ọnwa 1) mgbe ihe omume meghere Dropbox Rewind UI n'ime ụbọchị iri atọ gara aga nke mmemme faịlụ edekọlarị.

3. Google mbanye na Google Workspace (Trash, Manage Versions, Admin Console 25-Day Post-Trash Recovery, na nnukwu mpịakọta API)¶

N'adịghị ka OneDrive na Dropbox, Google Drive enweghị otu-pịa bọtịnụ "Weghachite Nile Drive" na UI ndị ahịa, yabụ ị ga-eji usoro mgbake ziri ezi dabere na faịlụ ndị ehichapụrụ *** ma ọ bụ ** dechie ya ebe ***:

1. ** Na-eweghachi ihe izizi ehichapụ na Google Drive Trash (Maka nyegharia aha+Hichapụ Ransomware ma ọ bụ mkpochapụ oke)*:
2. Mepee drive.google.com/drive/trash na ihe nchọgharị desktọpụ.
3. Pịa Trashed date nkụnye eji isi mee kọlụm iji hazie faịlụ ehichapụrụ nso nso a n'elu.
4. Pịa faịlụ dị ọcha nke mbụ nke ransomware/ihe mberede ehichapụrụ, pịgharịa gaa na ala, jide **Shift + pịa *** faịlụ ikpeazụ na ogbe, pịa aka nri, wee họrọ Restore (Ctrl + Z ma ọ bụ akara ngosi elekere weghachi). Faịlụ ọ bụla na-alaghachi ozugbo na folda nne na nna akwụgoro akwụrụ ya.
5. ** Ọ bụrụ na Google Drive Trash Ebuolarị ihe efu? (Google One Support & Google Workspace Admin 25-Day Rescue***:
6. Oghere Ọrụ Google (Azụmahịa, Enterprise, Education, Nonprofits): Ọbụlagodi mgbe onye ọrụ pịachara Empty trash -> Delete forever, Sava Google na-ejigide faịlụ ndị ehichapụrụ maka ụbọchị 25 ọzọ **. Banye na admin.google.com dị ka Super Admin -> gaa na Directory -> Users -> pịa onye ọrụ metụtara -> gbadaa na More options (ma ọ bụ pịa aka ekpe n'okpuru nchịkọta onye ọrụ) -> pịa Restore data -> họrọ Oke ụbọchị **ruo ụbọchị iri abụọ na ise azụ), họrọ Drive dị ka ngwa, wee pịa Restore .
7. ** Akaụntụ Gmail / Google One nkeonwe ***: Ọ bụrụ na ekpopụrụ ahịhịa Google Drive nke gị n'ime ụbọchị 25 gara aga , edela data ọhụrụ na draịva; mepee ozugbo support.google.com/drive/gethelp (ma ọ bụ nkata nkwado Google One) wee rịọ maka mgbake faịlụ ehichapụrụ draịva nchịkwa. Ngwá ọrụ nkwado nke Google nwere ike ịkpalite otu ụbọchị 25 nkwụghachi azụ azụ azụ ahịhịa maka akaụntụ ndị ahịa.
8. ** Otutu-iweghachite faịlụ edegharịrị site n'iji Manage Versions ma ọ bụ Google Drive API (rclone / Python)**:
9. Maka Google Docs, Ibé akwụkwọ, na ihe mmịfe: Mepee faịlụ -> pịa File -> Version history -> See version history (Ctrl + Alt + Shift + H) ma weghachi akara ngosi oge ụnyaahụ.
10. Maka faịlụ ọnụọgụ abụọ (PDF, DOCX, XLSX, JPG, ZIP) edere ya na ebe: Pịa aka nri faịlụ na Google Drive -> File information -> Manage versions, ebe Google na-ejigide ụdị ochie maka ụbọchị 30 ** (ma ọ bụ ụdị 100).
11. ** Ọ bụrụ na edegharịrị ọtụtụ puku faịlụ ọnụọgụ abụọ n'ebe ***: Apịla Manage versions 10,000 ugboro n'aka. Jiri rclone ma ọ bụ ** Google Apps Script / Drive API v3 revisions.list + revisions.delete edemede ***:
    • Na Google Drive API v3, mgbe ejiri ụdị ọjọọ dị ọhụrụ degharịa faịlụ dị adị (Ntụgharị N), na-akpọ Drive.Revisions.remove(fileId, latestRevisionId) na-ehichapụ naanị nlegharị anya kachasị njọ emepụtara taa, ** na-akwalite ngbanwe dị ọcha ụnyaahụ na-akpaghị aka N - 1 laghachi azụ ka ọ bụrụ faịlụ na-arụ ọrụ ugbu a *** n'ofe nchekwa niile:

      // Run inside script.google.com (with Advanced Drive Service v3 enabled) to roll back files modified after cutoffTime
      function rollbackOverwrittenFiles() {
        const cutoff = new Date("2026-11-01T00:00:00Z"); // Set to 5 minutes BEFORE the ransomware started
        const files = DriveApp.searchFiles('modifiedDate > "2026-11-01T00:00:00" and trashed = false');
        while (files.hasNext()) {
          const file = files.next();
          const revs = Drive.Revisions.list(file.getId()).revisions;
          if (revs && revs.length > 1) {
            const latest = revs[revs.length - 1];
            if (new Date(latest.modifiedTime) > cutoff) {
              Drive.Revisions.remove(file.getId(), latest.id);
            }
          }
        }
      }
      

12. ** Apụl iCloud Drive (iCloud.com/recovery Iweghachite data ụbọchị 30) ***:
13. Ọbụlagodi na ehichapụ faịlụ na iCloud Drive wee kpochapụ ya na faịlụ ndị ahụ Recently Deleted nchekwa na Mac ma ọ bụ iPhone gị, banye na icloud.com/recovery na ihe nchọgharị weebụ:
14. Pịa Restore Files -> lelee Select All (ma ọ bụ nyo site na ụbọchị ehichapụ) wee pịa Restore . Ihe nkesa azụ azụ Apple na-ejigide oghere mgbake ụbọchị 30 dị iche nke na-eweghachi akwụkwọ iCloud Drive ehichapụ, nchekwa Desktop/Akwụkwọ, ibe edokọbara, kọntaktị na kalenda.

Nkeji 3: Iwewe ihe nkpuchi na-anọghị n'ịntanetị site na ngwaọrụ nke abụọ na Google DriveFS / Windows Shadow Copies¶

Tupu ị jikọọ kọmpụta ọ bụla na ịntanetị, lelee ma draịvụ ike mpaghara gị ka nwere faịlụ gị na-emebibeghị:

Nkeji 4: Usoro njikọ njikọ dị mma (Etu esi eweghachi kọmpụta ndị emechara n'ịntanetị na-emebighị igwe ojii)¶

Otu n'ime mmejọ ndị a na-ahụkarị na mgbake igwe ojii na-eme ** mgbe ịmechara nke ọma weghachi faịlụ gị na interface webụ ígwé ojii: onye ọrụ gbanyeghachi laptọọpụ ha, onye ahịa mmekọrịta mpaghara na-eteta, hụ 20,000. .locked faịlụ ransomware (ma ọ bụ nchekwa efu) nọ ọdụ na draịvụ ike mpaghara, yana ** mekọrịta nrụrụ aka ozugbo ruo draịvụ igwe ojii eweghachitere ọhụrụ ***.

Soro ndetu ntughari njikọ a siri ike: 1. ** Na kọmpụta nke butere ihe a mere (Ransomware ma ọ bụ edemede ihe mberede)**: - Ọ bụrụ na *Ransomware kụrụ ya: Enweghachila njikọ nrụnye OS ahụ na akaụntụ igwe ojii gị. Mgbe ị na-ese onyinyo draịva maka nyocha ma ọ bụ napụta faịlụ ọ bụla naanị mpaghara anaghị akwado, hichapụ SSD kpamkpam (Secure Erase / hichapụ akụkụ niile) wee wụnye Windows ma ọ bụ macOS dị ọcha site na ihe nrụnye USB ama ama nke arụnyere na kọmpụta dị iche. - Gbanwee okwuntughe akaụntụ Google, Microsoft, Dropbox na Apple wee nyochaa Account Security -> Devices na Third-Party App Permissions iji nyochaa na ọ nweghị kuki nnọkọ infostealer ka na-arụ ọrụ. 2. Na kọmputa nke abụọ tupu ịgbanwuo Wi-Fi azụ ***: - Ọ bụrụ na ị weghachila draịva igwe ojii na steedị ọcha site na Restore your OneDrive ma ọ bụ Dropbox Rewind: 1. Bido kọmputa nke abụọ ** na Wi-Fi ka agbanyụrụ . 2. Gbanyụọ OneDrive / Dropbox / Google Drive na ** Ngwa mmalite (Task Manager -> Startup apps ya mere syncing daemon enweghị ike ịmalite na akpaghị aka. 3. Kpọgharia aha mpaghara ahụ C:\Users\<Name>\OneDrive (ma ọ bụ Dropbox) nchekwa na OneDrive_OLD_LOCAL_BACKUP. 4. Tụgharịa Wi-Fi azụ, malite ngwa mmekọrịta igwe ojii, hapụ ya ka ọ kpọpụ ya wee tụgharịa nke ọma, ma kwe ka ọ budata steeti igwe ojii dị ọcha eweghachitere ka ọ bụrụ folda ọhụrụ.

3. Iweghachi Windows Volume Shadow Copies (Previous Versions) na macOS APFS Snapshots mpaghara na PC Isi Iyi¶

Kedu ihe ma ọ bụrụ na nchekwa ezoro ezo ma ọ bụ ehichapụ ** ewepụrụ na mmekọrịta igwe ojii ** (dịka mpaghara Desktop nchekwa ma ọ bụ faịlụ buru ibu karịa oke mmekọrịta), ma ọ bụ onye ahịa mmekọrịta igwe ojii emechabeghị bulite ndezi nke izu gara aga tupu ihe mberede ahụ? 1. ** Na Windows 10/11ShadowExplorer & vssadmin***: - Ebe ọtụtụ ezinụlọ ransomware na-anwa ịgba ọsọ vssadmin.exe delete shadows /all /quiet, Njikwa Akaụntụ onye ọrụ (UAC), Nchọpụta na nzaghachi (Nchọpụta njedebe)EDR), ma ọ bụ na-abụghị onye nchịkwa na-egbochi ugboro ugboro ihichapụ ndò. - Gbaa Command ozugbo dị ka onye nchịkwa na igwe dịpụrụ adịpụ wee pịnye:

vssadmin list shadows

Ajụjụ a na-ajụkarị¶

Ịkwụ ụgwọ mgbapụta decryptor òtù mgbapụta ọ nwere ezi uche ma ọ bụrụ na ejikọta faịlụ m na OneDrive, Dropbox, ma ọ bụ Google Drive?¶

Ọ fọrọ nke nta ka ọ bụrụ mgbe. N'adịghị ka draịvụ ike mpaghara anaghị akwado ya, ọrụ nchekwa igwe ojii (OneDrive, Dropbox, Google mbanye, Igbe, na iCloud mbanye) na-echekwa faịlụ na ebe nchekwa ihe na-adịghị agbanwe agbanwe ebe mgbanwe ọ bụla na-emepụta ụdị ihe ọhụrụ na nhichapụ ọ bụla na-akpali ihe ahụ gaa na 30-ụbọchị (ma ọ bụ 93-na-180) akpa ahịhịa. Ma ransomware degharịrị faịlụ gị n'ọnọdụ ma ọ bụ mepụta nke ọhụrụ .kpọchiri faịlụ ma hichapụ ndị mbụ, Pasent 100 nke faịlụ izizi gị ezoghị ezo ka nọ ọdụ na sava igwe ojii n'ime Akụkọ ụdị ma ọ bụ ahịhịa.. Iji Weghachite OneDrive gị, Dropbox weghachite, ma ọ bụ Google Drive Trash na Revision mgbake na-eweghachite faịlụ gị tupu mbuso agha n'efu na enweghị ihe ize ndụ nke decryptors ransomware gbajiri.

Kedu ihe kpatara ransomware na Windows PC m ji jisie ike zoo Google mbanye ma ọ bụ OneDrive m na mbụ? Igwe ojii anaghị echebe malware?¶

Iji mee ka faịlụ ígwé ojii rụọ ọrụ na mmemme desktọpụ dị ka Microsoft Word, Excel, Photoshop, na AutoCAD, ndị ahịa mekọrịta desktọọpụ (Google Drive maka Desktọpụ, OneDrive.exe, Dropbox.exe) bulie nchekwa igwe ojii gị ka a folda mpaghara ma ọ bụ leta draịva mebere (G:\ ma ọ bụ C: \ Users Aha \ OneDrive) n'okpuru ikike onye ọrụ Windows gị. Mgbe ransomware na-eme n'okpuru akaụntụ onye ọrụ Windows gị, ọ nwere ikike mgbanwe faịlụ nke ị na-eme: ọ na-ejegharị akwụkwọ ozi draịva ọ bụla.C:\, D:\, G:\) na nchekwa onye ọrụ, na-agụ faịlụ ọ bụla, na-ezochi ya ma chekwaa ya. Ọbụna faịlụ atọrọ "Faịlụ naanị n'ịntanetị / iyi" (A na-achọ faịlụ) budata ya na-akpaghị aka ("hydrated") na Windows na-efe efe mgbe ọ bụla usoro ransomware mepere njikwa faịlụ ịgụ ya. Ọ bụ ya mere iwepụ netwọkụ ahụ ozugbo ji dị oke egwu: ọ na-emebi nbudata hydration nke faịlụ igwe ojii naanị n'ịntanetị tupu ihe mgbapụta agụọ ha.

Gịnị ma ọ bụrụ na m ehichapụrụ nnukwu nchekwa Ekekọrịtara na Google Drive ma ọ bụ Dropbox na mberede, yana ndị otu ndị ọzọ nwere ụfọdụ faịlụ dị n'ime ya?¶

N'ime Dropbox, onye ọ bụla nwere ikike ndezi nwere ike iji faịlụ ehichapụrụ ma ọ bụ Dropbox weghachite na nchekwa nke ekekọrịtara iji weghachi usoro nchekwa nchekwa niile maka ndị otu niile. N'ime Google mbanye, Nhazi ụlọ nwere pụrụ iche: mgbe ị na-ehichapụ obere nchekwa n'ime nchekwa nke onye ọzọ (ebe ha bụ Onye nwe na ị bụ onye editọ), wepụ faịlụ ahụ na folda nkekọrịta umu mgbei faịlụ kama ikpochapụ ya maka onye nwe ya, ma ọ bụ bugharịa naanị faịlụ ị nwe n'ime nke gị ahịhịa (drive.google.com/drive/trash) ka faịlụ nke onye ọrụ ibe gị nwere na-abanye ha Ahịhịa (ma ọ bụ bụrụ nwa mgbei na mgbọrọgwụ Drive ha nwere ike ịchọ site na bụ: onye nwe enweghị ahaziri: m na Google Drive search mmanya).

Ihe mgbapụta nwere ike ihichapụ akụkọ ụdị igwe ojii m ma ọ bụ kpofuo OneDrive / Google Drive recycle Bin na-akpaghị aka?¶

Ọkọlọtọ faịlụ sistemụ ransomware ọnụọgụ abụọ (LockBit, Akira, BlackCat, Gwuo, Phobos) na-arụ ọrụ naanị site na API sistemụ faịlụ Windows mpaghara (MepụtaFileW, Dee faịlụ, Hichapụ faịlụW) na enweghị ike jikọọ na webụ naanị Akụkọ ụdị, Ihe eji emegharị ihe nke abụọ, ma ọ bụ Google Workspace Admin Vault. Agbanyeghị, ọ bụrụ na onye mwakpo ahụ wepụrụ otu infostealer (Lmma, RedLine) ma ọ bụ nwee Desktop Remote mmekọrịta (RDP / AnyDesk) ịnweta ihe nchọgharị weebụ gị mepere emepe, ha nwere ike iji aka mepee ihe nchọgharị gị wee pịa Mkpofu efu. Ọbụlagodi na ha mere, cheta nkwụghachi azụ abụọ a: (1) Gbanye OneDrive / SharePoint, ihe efu na-aga na Ihe eji emegharị ihe nke abụọ ruo ụbọchị 93; na (2) Na Google mbanye / Google Workspace, ihe mkpofu efu na-anọgide na-enwetaghachi site n'aka Admin Workspace ma ọ bụ Google One Nkwado maka Ụbọchị 25 ka ihichapụ na-adịgide adịgide.

Ntuziaka emetụtara¶

• Ransomware na malware: ikewapụ na mgbake ozugbo
• Hichapụ faịlụ mberede, mbanye ahaziri na mgbake foto
• Okwu, Excel, PDF, ma ọ bụ faịlụ nchekwa data mebiri emebi yana mgbake akwụkwọ echekwara
• Ndabere kọmputa: atụmatụ 3-2-1 na mgbake ọdachi
• Mwepu kuki nke oge, malware infostealer, na mwepu igodo mbanye
• Nọmba mberede site na obodo

Isi mmalite na nduzi ọchịchị¶

• Nkwado Microsoft (support.microsoft.com/en-us/office/restore-your-onedrive-fa231298-759d-41cf-bcd0-25ac53eb8a15): * Weghachite OneDrive gị (ụbọchị 30 n'ime oge Rollback Histogram, Nchọpụta Nchọpụta Ransomware, na Nke Mbụ/Nke Abụọ SharePoint Recycle Bin Recovery)*.
• Ebe enyemaka Dropbox (help.dropbox.com/delete-restore/rewind & recover-older-versions): * Iji Dropbox rewind weghachi Ransomware ma ọ bụ mkpochapụ Mass, ụdị ụdị 30 ruo 180-ụbọchị, na .dropbox.cache Nhazi*.
• Enyemaka onye nchịkwa Google Workspace yana akwụkwọ gọọmentị Google Drive (support.google.com/a/answer/6052340 & developers.google.com/drive/api/reference/rest/v3/revisions): * Iweghachite data Google Drive ehichapụrụ na-adịgide adịgide n'ime ụbọchị iri abụọ na ise site na njikwa njikwa na draịva API v3 revisions Nlekọta *.
• Ụlọ ọrụ nchekwa Cybersecurity na akụrụngwa (CISA / StopRansomware.gov): Mwekọrịta mmekọrịta nchekwa igwe ojii na ụdị mkpọghachi azụ nke Post-Ransomware.