On the evening of May 12, domestic college students reported that their computers were attacked by viruses and their files were encrypted. The attacked computer desktop will show that you need to pay a certain amount of bitcoin to unlock it.

Since the night of 12, Shandong University, Nanchang University, Guangxi Normal University, Dongbei University of Finance and Economics, East China Jiaotong University, civil aviation university of china and many other universities have issued relevant preventive announcements about the ransomware "Bitcoin virus" invading the campus network.

The campus network ransomware is a remote "worm virus" that criminals turn into hacker weapons. It can remotely attack Windows port 445 (file * * *). Once infected with the ransomware, the computer's disk files will be encrypted and locked, and pictures, documents, videos, compressed packages and other materials cannot be opened normally.

Experts said that once recruited, there is no solution at present.

There have been worms spreading through port 445 in China, so some operators blocked port 445 for individual users. However, due to the lack of this restriction on Education Network, this campus network has become the "hardest hit" for ransomware attacks.

For computer users infected with ransomware and whose files are encrypted, they can only pay bitcoin at present, and there is no better way, but even if they pay bitcoin according to the requirements of criminals, there is no guarantee that they can get the encrypted files back. "We are also trying to find a way to try to decrypt the encrypted files, but there is no other way for the time being."

According to their monitoring, at present, in addition to the education network and campus network of some colleges and universities, enterprises have also been affected by the virus, and some civil facilities such as the computer system of gas stations have also been attacked by the virus. Although experts say it can't be cracked at present, experts all over the world are actively cracking it because of the wide spread of the virus, and I believe there will be progress soon.