NO_MORE_RANSOM - sida loo decrypt faylasha lo?

Dabayaaqadii 2016, dunidana waxaa laga soo weeraray by virus aad u Ciyaalle-qoriga sir waraaqaha iyo content multimedia, NO_MORE_RANSOM loogu magac daray. Sida loo decrypt faylasha dib marka ay qofka khatar this, iyo in la sii hadli doonaa. Si kastaba ha ahaatee, mar waxaa lagama maarmaan ah si uu ugu digo dhammaan dadka isticmaala oo lagu soo weeraray, in aysan jirin habka keli ah. Tani waxay ku xiran yahay mid ka mid ah algorithms encryption ugu horumarsan, iyo heerka uu wax lays of virus galay nidaamka kombiyuutarka, ama xataa shabakad degaanka degaanka (inkasta oo markii hore on saamaynta network iyo waxa aan la xisaabinayaa).

Waa maxay virus NO_MORE_RANSOM ah iyo sida ay u shaqayso?

Guud ahaan, virus laftiisa sida fasalka ah Trojans sida waan ku jeclahay, kaas oo dhex gelin nidaamka kombiyuutarka iyo imayl files isticmaala (sida caadiga ah multimedia). Si kastaba ha ahaatee, haddii ay ayeeyo is khilaafeen sirta keliya, virus this waxaa aad u badan laga soo amaahday hanjabaad mar cajiib ah loo yaqaan DA_VINCI_COD, isku iniinahoodu ku dhex jiraan kaloo u shaqeeya extortionist.

Ka dib markii cudurka, inta badan ee files audio, video, naqshadeynta iyo waraaqaha xafiiska lagu qoro magac aad u dheer la NO_MORE_RANSOM dheeraad ah, oo ka kooban password adag.

Marka fariin furay muuqataa in files yihiin lo iyo decryption alaabta aad u baahan tahay in aad bixiso lacagta qaar ka mid ah.

Sida ay khatar ku tahay dhex gelin nidaamka?

Ina keena aynu iska daa su'aasha ah ee sida, ka dib markii NO_MORE_RANSOM saameynta decrypt faylasha of mid ka mid ah noocyada kor ku xusan, oo u soo jeesan technology for cabaar virus galay nidaamka kombiyuutarka. Nasiib darro, sida corny sida ay u muuqan kartaa, waxa uu u adeegsanayaa hab beryihii hore ee: via e-mail la Timaadda lifaaqa la furay, user ee helaa dardargelinta iyo code xaasidnimo ah.

Asalnimada, sida aan ka arki kartaa, farsamadaa waxa ay tahay kama duwana. Si kastaba ha ahaatee, farriinta la ismidab karaa sida wax a text waxba tarayn. Or, on lid ku ah, tusaale ahaan, in ay dhacdo ka mid ah shirkadaha waaweyn, - isbadal ku dhacay shuruudo qandaraas. Waxaa la fahamsan yahay in karaaniga caadi ah uga furmay lifaaqa, oo markaas oo uu helo natiijooyin masaakiinta. Mid ka mid ah kicitaanka ifka noqday saldhig xirmo encryption caan 1C xogta. Oo kanu waa arrin culus.

NO_MORE_RANSOM: sida loo fududeyn in dukumentiyada?

Laakiin weli ku kacaya in ay soo noqdaan si ay su'aasha ugu muhiimsan. Sida xaqiiqada ah in qof walba uu xiiseynayo sida loo decrypt faylasha. virus NO_MORE_RANSOM ayaa isku xigxiga oo ka mid ah tallaabooyinka. Haddii user wuxuu isku dayaa in uu fuliyo decryption isla markiiba ka dib markii cudurka, ka samaysaa wax kale ee suurtogalka ah. Haddii halista ku istawooday in nidaamka, hoogtay, oo aan gargaar ka mid ah xirfadlayaasha ma aan samayn karo. Laakiin inta badan ay yihiin bilaa awood.

Haddii khatar la ogaado in hab wakhti, jidka kaliya hal - khuseeya taageerada shirkadaha antivirus (weli ma waraaqaha oo dhan ayaa la Windows XP) si ay u soo diri labo ka geli karin loo furo files iyo ku salaysan falanqaynta asalka ah, ku kaydsan warbaahinta saari karo, isku day inaad si loo soo celiyo documents hore u qabay cudurka hore koobiyeynta on drive flash isla USB wax kasta oo kale waa la heli karaa in la furo (in kastoo damaanad buuxda in fayraska ayan sii faafin dokumentiyada sida aan waa isku mid). Ka dib markii in, waayo daacad side waxaa lagama maarmaan ah si loo hubiyo ugu yaraan scanner fayras (yaa garanaya waxa).

geynta

Sidoo kale waa in aan soo magacawnay xaqiiqada ah in si sir virus isticmaalo geynta RSA-3072, taas oo, in la barbardhigo technology ee hore loo isticmaalay RSA-2048 waa sidaas adag, in doorashada ee password saxda ah, xitaa haddii loo maleeyo in this la socda oo dhan shaybaar anti-virus ka qaban doonaan , waxay qaadan kartaa bilo ama sannado. Sayidka, su'aasha ah ee sida loo rayi NO_MORE_RANSOM, waxay u baahan yihiin waqti lumis ilaa xad. Laakiin waxa haddii aad u baahan tahay in si degdeg ah loo soo celiyo macluumaadka? First of dhan - si ay u tirtirto virus laftiisa.

Ma suurogalbaa in ay ka saarto virus iyo sida loo sameeyo?

Dhab ahaantii, ma aha adag tahay in la sameeyo. Siidi Kibriyaan ee abuuray fayraska, hanjabaad nidaam computer aan la carqaladeeyey. On lid ku ah - oo waxa uu xitaa "samoudalitsya" faa'iido ka dib dhamaadka falalka ogalayn in.

Si kastaba ha ahaatee, marka hore, ka dib markii uu hogaanka u ah fayraska, weli waa in la Kipury. Tallaabada ugu horreysa waa in la isticmaalo korontada difaaca la qaadi karo sida KVRT, Malwarebytes, Dr. Web CureIt! iyo wixii la mid ah. Fiiro gaar ah: isticmaalo si ay u tijaabiso barnaamijka waa in nooca la qaadan karo waa waajib (aan ku rakibidda wax on drive adag la socda fiican loogama ka warbaahinta saari karo). Haddii khatar la ogaado, waa in la degdeg ah looga saaro.

Haddii wax tallaabo ah sida aan la bixiyo, waa in aad marka hore u tagtaa ah "Manager Task" oo uu dhammayn dhammaan hababka la xiriira fayraska, soocaa by magaca adeeg (sida caadiga ah, habka Runtime qabasho).

Ka dib markii ay ka saareen dhibaatada, waa in aynu u qayshanno Editor Diiwaanka (regedit in menu "Run") oo raadi horyaalka «Server Client Runtime System» (aan qaws ah), kadibna la isticmaalayo menu dhaqaaqo on natiijada "Raadi Next ..." in meesha laga saaro oo dhan alaabta helay. Next aad u baahan tahay inaad guuleysatey computer ah, iyo in ay aaminsan yihiin in ay "Manager Task" si aad u aragto haddii ay jiraan waa hab loo baahan yahay.

In mabda'a, su'aasha ah ee sida loo rayi virus NO_MORE_RANSOM weli waa on stage of cudurka, mid la xalin karo habkan by. jaaniska dhexdhexaadnimada, dabcan, waa yar yahay, laakiin waxaa jira fursad ah.

Sida loo decrypt faylasha NO_MORE_RANSOM Windows XP: hayaan

Laakiin waxaa jira hab kale, taas oo dad yar ogahay ama xataa malee. Xaqiiqada ah in nidaamka qalliinka si joogto ah waxay abuurtaa hayaan hooskii u gaar ah (tusaale ahaan, haddii ay dhacdo soo kabashada), ama ay si ula kac ah abuurista images sida. Sida dhaqanka muujinaysaa, virus this uusan saamayn ku lahayn kuwa nuqul (in ay qaab-dhismeedka, waxaa si fudud aan la bixin, inkastoo ay suurto gal tahay).

Sayidka, dhibaatada of sida loo rayi NO_MORE_RANSOM, hoos karaysa in si ay u isticmaalaan calaamad in. Si kastaba ha ahaatee, si ay u isticmaalaan qalabka caadiga ah Windows laguma talinayo for this (iyo dadka isticmaala badan in u-ekaanta qarsoon ma heli doonta oo dhan). Sidaa darteed, waxaad u baahan tahay in ay isticmaalaan ShadowExplorer utility ah (waa la qaadi karo).

Si loo soo celiyo, si fudud u ordi ee eedeysanuhu file barnaamijka, kala soocaan warbixinta taariikhda ama horyaalka, dooro nuqul la doonayo (files, fayl, ama nidaamka oo dhan) iyo iyada oo loo marayo menu PCM ay u isticmaalaan line dhoofinta. tusaha si fudud loo doortay dheeraad ah kaas oo nuqul hadda lagu kaydin doonaa, ka dibna wuxuu isticmaalaa habka soo kabashada caadiga ah.

qalab-dhinac saddexaad

Dabcan, dhibaatada of sida loo rayi NO_MORE_RANSOM, laboratories badan bixiyaan xal iyaga u gaar ah. Tusaale ahaan, "Kaspersky Lab" talinaysaa isticmaalka ee ay wax soo saarka gaar ah software Kaspersky Decryptor, soo bandhigay laba nooc - Rakhini iyo Birmingham.

eegno No yar oo xiiso leh iyo horumarinta la mid ah sida NO_MORE_RANSOM decoder by Dr. Web. Laakiin halkan waxaa lagama maarmaan ah si deg deg ah in ay tixgeliyaan in isticmaalka barnaamijyada sida inuu xaq yahay oo kaliya in ay dhacdo ogaado khatar degdeg ah galay, halka files oo dhan ma ah lagu qaadsiiyay. Haddii fayruska istawooday dalku nidaamka (marka Windows XP files kaliya aan la leh ay asalka ah non-Windows XP marka la barbar dhigo karo), iyo codsiga sida laga yaabaa in aan waxtar lahayn.

Sidaas darteed

Dhab ahaantii, gabagabo yahay oo keliya mid ka mid ah: in ay la dagaallamaan virus waa in uu noqdaa oo keliya marxaladda cudurka, marka uu jiro kaliya encryption koowaad ee files. Guud ahaan, waxaa fiican inaan la furi karin ku lifaaqan ee farriimaha e-mail laga helay ilo shaki helay (tani waxaa loola jeedaa si gaar ah macaamiisha, si toos ah lagu rakibay on your computer - Outlook, Oulook Express, iwm). Intaa waxaa dheer, haddii qofka shaqaalaha ah uu leeyahay ee ay qubo liiska macaamiisha iyo la-hawlgalayaasheeda si wax looga qabto furitaanka oo ka mid ah farriimaha "Left" waa arrin aan habboonayn, sida ugu badan ee qorista calaamad heshiis aan la qarsoon ganacsiga, iyo ammaanka internetka.