virus RSA-4096

[pirossini]

Salve ho il pc infettato da un virus RSA-4096, che mi apre una serie di finestre blocco note con il testo:
{}_~_~+
-$.-_+$|~~_||
=|_$.**+-~|
$+|=*.-=|
!!! IMPORTANT INFORMATION !!!!

All of your files are encrypted with RSA-4096.
More information about the RSA algorythm can be found here:
http://en.wikipedia.org/wiki/RSA_(cryptosystem)

Decrypting of your files is only possible with the private key and decrypt program, which is on our secret server.
To receive your private key follow one of the links:
1. http://88fga.ketteaero.com/983F551C67E640EA
2. Decrypt service
3. http://uj5nj.onanwhit.com/983F551C67E640EA

If all of the addresses are not available, follow these steps:
1. Download and install Tor Browser: https://www.torproject.org/download/download-easy.html
2. After a successful installation, run the browser and wait for initialization.
3. Type in the address bar: k7tlx3ghr3m4n2tu.onion/983F551C67E640EA
4. Follow the instructions on the site.

!!! Your personal identification ID: 983F551C67E640EA !!!
)(*=~_$~+$==-$*~=$$
__$-=-+*

Come posso fare per rimuovere il virus e salvare i file?
Vi allego il file FRST di Farbar.

Grazie.

FRST.txt

[Gatsu99]

ahia !!

Sembrerebbe un figlio di cryptolocker ergo
o hai un backup su un hd esterno scollegato al momento
dell'infezione o HAI PERSO TUTTO