勒索软件检测和恢复文件

注意:  我们希望能够尽快以你的语言为你提供最新的帮助内容。 本页面是自动翻译的,可能包含语法错误或不准确之处。我们的目的是使此内容能对你有所帮助。可以在本页面底部告诉我们此信息是否对你有帮助吗? 请在此处查看本文的 英文版本 以便参考。

For Office 365 家庭版 and Office 365 个人版 subscribers, Ransomware Detection notifies you when your OneDrive files have been attacked and guides you through the process of restoring your files. Ransomware is a type of malicious software (malware) designed to block access to your files until you pay money.

When Office 365 detects a ransomware attack, you'll receive an email from Microsoft Office 365.

  1. Click the link in the email or go to the OneDrive website, and we'll walk you through the recovery process, which includes:

  2. Confirm your files are infected.

  3. Clean all your devices.

  4. Restore your OneDrive.

从 Microsoft 勒索软件检测电子邮件的屏幕截图

提示: You can follow this process even if you haven't received this email, but you think your files might be compromised by a ransomware attack.

Steps to the ransomware detection and recovery process on the OneDrive website

If Office 365 detected a ransomware attack, you see the Signs of ransonware detected screen when you go to the OneDrive website (you might need to sign in first). Select the Get started button to begin.

勒索软件的符号的屏幕截图检测到 OneDrive 网站上的屏幕

Step 1: Confirm your files are infected

On the Do these files look right? screen, we'll show you some suspicious files. If they have the wrong name or suffix, or don't look right when you open them from the list, they're likely compromised by ransomware.

执行这些文件外观屏幕右 OneDrive 网站上的屏幕截图

  1. Select a file to open it in the online viewer. (This won't download the file to your device.)

  2. If you don't see the file, you'll have the option to download it to your device so can open it.

  3. Repeat steps 1 and 2 for as many files as you want to see.

  4. If your files are infected, select My files are infected to move to the next step in the ransomware recovery process. Otherwise, if your files look fine and you're confident they aren't infected with ransomware, select My files are ok.

    If you choose My files are ok, you'll exit the ransomware recovery process and you'll go back to using OneDrive as usual.

Step 2: Clean all your devices

On the Clean all your devices screen, you'll see instructions for cleaning all your devices where you use OneDrive. Before you restore your files, it's important to use anivirus software to clean all your devices. Otherwise, your files could get encrypted again when you restore them.

清理 OneDrive 网站上的所有设备屏幕的屏幕截图

  1. Select the link for the version of Windows that you're using and follow the instructions in the article.

  2. Repeat step 1 for all the other devices where you use OneDrive.

  3. After completing the steps in the articles, return to the Clean all your devices page on the OneDrive website and choose one of these buttons:

    • All my devices are clean. Select this button when you've finished cleaning all your devices, and you're ready to move to the last step in the recovery process, which is to restore your files from OneDrive.

    • Antivirus can't clean all my devices. Select this button after you're tried to clean your devices and discovered that you can't clean all your devices for whatever reason. You'll now be on the Reset devices page, which lists information about how to reset your devices.

      在 OneDrive 网站上的其余部分设备屏幕的屏幕截图

      Follow the links based on your operating system. When you've cleaned or reset all your devices, go back to the OneDrive website to return to the Reset devices page, select the My devices are all clean or reset box, and then select OK.

Step 3: Restore your files from OneDrive

The final step after all your devices are clean is to restore your OneDrive.

When you reach this step, the time and date that ransomware was detected will automatically be selected for you.

需要更多帮助吗?

Learn how to Find lost or missing files in OneDrive or View previous versions of Office files.

通过向 OneDrive 支持团队发送邮件来获取帮助。在 OneDrive 移动应用中晃动设备来获取帮助,或者在 OneDrive 上共享反馈。

Check the OneDrive help center.

另请参阅

Office 365 advanced protection

扩展你的 Office 技能
了解培训
抢先获得新功能
加入 Office 预览体验计划

此信息是否有帮助?

谢谢您的反馈!

谢谢你的反馈! 可能需要转接到 Office 支持专员。

×