Advertisement
Guest User

CryptoLocker Detection FsrmFileGroup

a guest
Jun 6th, 2016
28
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. New-FsrmFileGroup -Name "CryptoLocker Detection" -IncludePattern @("*.ecc", `
  2. "*.ezz", "*.exx", "*.zzz", "*.xyz", "*.aaa", "*.abc", "*.ccc", "*.vvv", `
  3. "*.xxx", "*.ttt", "*.micro", "*.encrypted", "*.locked", "*.crypto", "_crypt", `
  4. "*.crinf", "*.r5a", "*.XRNT", "*.XTBL", "*.crypt", "*.R16M01D05", "*.pzdc", `
  5. "*.good", "*.LOL!", "*.OMG!", "*.RDM", "*.RRK", "*.encryptedRSA", `
  6. "*.crjoker", "*.EnCiPhErEd", "*.LeChiffre", "*.keybtc@inbox_com", "*.0x0", `
  7. "*.bleep", "*.1999", "*.vault", "*.HA3", "*.toxcrypt", "*.magic", `
  8. "*.SUPERCRYPT", "*.CTBL", "*.CTB2", "*.locky", "HELPDECRYPT.TXT", `
  9. "HELP_YOUR_FILES.TXT", "HELP_TO_DECRYPT_YOUR_FILES.txt", "RECOVERY_KEY.txt", `
  10. "HELP_RESTORE_FILES.txt", "HELP_RECOVER_FILES.txt", "HELP_TO_SAVE_FILES.txt", `
  11. "DecryptAllFiles.txt", "DECRYPT_INSTRUCTIONS.TXT", `
  12. "INSTRUCCIONES_DESCIFRADO.TXT", "How_To_Recover_Files.txt", `
  13. "YOUR_FILES.HTML", "YOUR_FILES.url", "encryptor_raas_readme_liesmich.txt", `
  14. "Help_Decrypt.txt", "DECRYPT_INSTRUCTION.TXT", "HOW_TO_DECRYPT_FILES.TXT", `
  15. "ReadDecryptFilesHere.txt", "Coin.Locker.txt", "_secret_code.txt", `
  16. "About_Files.txt", "DECRYPT_ReadMe ptAllFiles.txt", "FILESAREGONE.TXT", `
  17. "IAMREADYTOPAY.TXT", "HELLOTHERE.TXT", "READTHISNOW!!!.TXT", `
  18. "SECRETIDHERE.KEY", "IHAVEYOURSECRET.KEY", "SECRET.KEY", `
  19. "HELPDECYPRT_YOUR_FILES.HTML", "help_decrypt_your_files.html", `
  20. "HELP_TO_SAVE_FILES.txt", "RECOVERY_FILES.txt", "RECOVERY_FILE.TXT", `
  21. "RECOVERY_FILE*.txt", "HowtoRESTORE_FILES.txt", "HowtoRestore_FILES.txt", `
  22. "howto_recover_file.txt", "restorefiles.txt", "howrecover+*.txt", `
  23. "_how_recover.txt", "recoverfile*.txt", "recoveryfile*.txt", `
  24. "Howto_Restore_FILES.TXT", "help_recover_instructions+*.txt", `
  25. "_Locky_recover_instructions.txt")
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement