NO_MORE_RANSOM - sei kubvisa mafaira akavharidzirwa?

Pakupera kwa2016, nyika yakarwiswa nehutachiona husina kunyanyisa cheTrojan iyo yakavhara zvinyorwa zvemashandisi uye zvinyorwa zvemastimedia, zvinonzi NO_MORE_RANSOM. Nzira yekudzikisa mafaira mushure mokunge zvinetso zvekutyisidzira izvi zvicharatidzwa zvakare. Zvisinei, kana iwe ukanyevera vese vashandisi vakamborwiswa, hapana nzira yunifomu. Izvi zvinokonzerwa nekushandiswa kweimwe yepamusoro yakanyanyogadzirisa maitiro ekushandura, uye chirwere chetachiona chinopinda mumakombiyuta system kana kunyange kumatare emunharaunda (kunyange pakutanga pakutanga yakanga isingagadziriswi nehutano hwehutano).

Iro utachiona hweiyo NO_MORE_RANSOM uye inoshanda sei?

Muzhinji, hutachiona pachahwo hunofanirwa kukirasi yeTrojans yakadai sekuti Ndinokuda iwe inopinda mumakombiyuta uye unyoresa mafaira evashandi (kazhinji multimedia). Zvisinei, kana mutungamiri wacho akasiyana chete nekuteterera, ipapo chirwere ichi chakatora zvakanyanya kubva kune dambudziko rekunzwa kamwe-kamwe rainzi DA_VINCI_COD, kubatanidza mabasa eanodzvinyirira pachake.

Mushure moutachiona, mafaira akawanda ehurukuro, vhidhiyo, mafirimu kana mabhuku ehofisi anopiwa zita refu nechokuwedzera kwaNo_MORE_RANSOM, ine shoko rakaoma.

Paunenge uchiedza kuvhura, shoko rinowanikwa pahwindo rinoratidza kuti mafaira acho akavharidzirwa, uye iwe unoda kubhadhara chimwe chimwe chekuti uchinje.

Kutya kunopinda sei muhurongwa?

Ngatisiye mubvunzo wekutsvaga mafaira emhando ipi neipi yepamusoro apa mushure mekushandiswa kwaNo_MORE_RANSOM, asi tendeukira kune teknolojia yehutachiona inopinda mumakombiyuta. Zvinosuruvarisa, kunyange zvazvo corny inogona kurira, imwe nzira yekare inopupurirwa inoshandiswa: kero ye-e-mail inogamuchira tsamba ine chibatanidzwa, icho, kana chikazarurwa, mushandisi anogamuchira nhungamiro yakaipa ye code.

Kutanga, sezvatinoona, nzira iyi haisi yakasiyana. Zvisinei, shoko racho rinogona kushandiswa sechinyorwa chisina maturo. Kana, pane zvinopesana, somuenzaniso, kana iri mubvunzo wemakambani makuru, - pasi pekushandurwa kwemamiriro ezvinhu chero kambani. Zvinonzwisisika kuti nhengo-uye-file vheki anozarura chibatanidzwa, uye anogamuchira chigumisiro chinoshungurudza. Chimwe chezvisikwa zvakajeka pakanga pane kunyorwa kwezvinyorwa zvevakakurumbira 1C pari. Uye iyi ibhizimisi bhizinesi.

NO_MORE_RANSOM: sei kugadzirisa zvinyorwa?

Asi zvakadaro zvakadaro zvakakosha kutarisa kumubvunzo mukuru. Zvechokwadi munhu wese anofarira nzira yekudzima mafaira. Utachiona NO_MORE_RANSOM ine zvikamu zvaro zvezviito. Kana munhu anoshandisa kuedza kubvisa chinyorwa pakarepo mushure moutachiona, zvinogona kuitika nenzira imwe. Kana kutyisidzira kwakagadziriswa mukati mehurongwa zvakasimba, hongu, pasina rubatsiro rwevanyori pano inonyanya kukosha. Asi ivo kazhinji havana simba.

Kana kutyisidzira kwave kuonekwa panguva yakakodzera, nzira chete ndeyokutaurirana nemakambani anonzi anti-virus kushandiswa kwemashumiro (kwete mapepa ose akanyorwa kare), tumira zvinyorwa zvishoma zvisingawaniki pakuzarura, uye zvichienderana nekuongorora kwepakutanga zvakachengetwa pamushumo unogona kubviswa, edza kudzorera zvakare mabhuku ane hutachiwana Kupikira kune imwechete flash kutengesa zvinhu zvose zviripo zvekuvhura (kunyange pasinawo chivimbo chokuti hutachiona hahupindi mumabhuku akadaro). Pashure pacho, kuti ive yechokwadi, mutakuri anofanira kuongororwa pamwe ne anti-virus scanner (iwe hauzive chii).

Algorithm

Zvakasiyana, zvinofanira kunzi kuti hutachiona hunoshandisa RSA-3072 shanduro yekushandura, iyo, kusiyana nemakambani akamboshandiswa RSA-2048 teknolojia, yakaoma kwazvo kuti kusarudzwa kwephasiwedi inoda, kunyange kana yakazara yose ye anti-virus laboratories , Zvinotora mwedzi nemakore. Nokudaro, mubvunzo wekutsvaga NO_MORE_RANSOM unoda nguva yakawanda. Asi zvakadini kana uchida kudzorera mashoko pakarepo? Chokutanga pane zvose, bvisa utachiona pachahwo.

Ndinogona here kubvisa hutachiona uye sei?

Zvechokwadi, hazvisi zvakaoma kuita izvi. Kutonga nekusava nehanya kwevadziri vehutachiona, kutyisidzira mumakombiyuta haisi kuvharwa. Pane zvinopesana, zvinotobatsira kuti "kubuda" mushure mokuguma kwezviito.

Kunyange zvakadaro, pakutanga, zvichienderera mberi pamusoro pehutachiona, inofanira kunge isina kukwana. Chokutanga pane zvose zvakakosha kushandisa zvigadzirwa zvekuchengetedza zvinoita seKVRT, Malwarebytes, Dr.Sc. Web CureIt! Uye yakafanana. Ndapota cherechedzai: mapurogiramu anoshandiswa pakutsvaga anofanira kunge ari anonyatsotarisa asi asingakundi (pasina kuisa kune disk dambudziko nekwakatanga kubuda kubva mumutambo unobviswa). Kana kutyisidzira kwaonekwa, inofanira kubviswa pakarepo.

Kana izvi zvisiri izvo, unofanira kutanga kuenda kuMabasa Chekuita uye kupedza zvose zvinosanganiswa nehutachiona, kutarisa kunze kwebasa nemazita (kazhinji inonzi Runtime Broker process).

Mushure mokubvisa basa racho, unoda kudana system registry editor (regedit mumutambo we "Run") uye tsvaga zita rokuti "Client Server Runtime System" (pasina zvinyorwa), zvino shandisa "Tsvaga Izvo ..." menyu yekutsvaga kuti ubvise zvinhu zvose zvakawanikwa. Zvadaro, unoda kudzorerazve kombiyuta uye utende mu "Basa reMeneja", pasinei nekutsvakurudza.

Pakupedzisira, mubvunzo wekuraira chirwere cheNo_MORE_RANSOM pachikamu chekutapukira chinogona kugadziriswa nenzira iyi. Izvo zvingave zvekuregererwa kwayo, zvechokwadi, hazvina kunaka, asi kune mukana.

Nzira yekudzikisa mafaira akavharidzirwa NO_MORE_RANSOM: zvigadziro

Asi pane imwe nzira zvakare iyo vashomanana vanhu vanoziva kana kutofungidzira pamusoro. Icho chokwadi ndechekuti chirongwa chekushanda pachako pachacho chinoita kuti pachave nemumvuri maitiro ekuchengetedza (somuenzaniso, kana akadzoka), kana kuti munhu anoshandisa nemaune mifananidzo yakadaro. Sezvakaratidzwa zvinoratidzira, zviri pamakopi akadaro kuti hutachiona hahushandi (mukugadzirisa kwayo haisi kugoverwa, kunyange isina kubviswa).

Nokudaro, dambudziko rekugadzirisa sei NO_MORE_RANSOM rakaderedzwa kusvika richivashandisa. Zvisinei, hazvibvumirwi kushandisa shanduro yeWindows zana yeiyi (uye vazhinji vashandisi havazokwanisi kuwana mabhuku akavanzika zvachose). Saka, unofanirwa kushandisa shanduro ShadowExplorer (iyo inoshandiswa).

Kuti udzore, iwe unongoda kuisa purogiramu inoshandiswa yepurogiramu, sarudza ruzivo nemazuva kana zvikamu, sarudza kopi yaunoda (faira, folda kana yose yakarongeka) uye shandisa iro rinotengeserana mutsara kubva paPMM menu. Zvadaro, sarudza sarudzo iyo iyo ikozvino ikopi ichaponeswa, uye shandisa nzira yakakwana yekudzidzira.

Third party party utilities

Zvechokwadi, kune dambudziko rekugadzirisa sei NO_MORE_RANSOM, ma laboratori mazhinji anopa mazano avo. Semuenzaniso, Kaspersky Lab inokurudzira kushandisa purogiramu yacho chaiyo yeKaspersky Decryptor, inowanikwa mumitauro miviri - Rakhini uye Rector.

Pasinei nekunaka kutarisa uye kufanana kwakafanana nekududzira NO_MORE_RANSOM kubva kuna Dr. Webhu. Asi pano pakarepo zvinofanira kufunga kuti kushandiswa kwezvirongwa zvakadaro kunoruramisirwa chete kana kuonekwa nokukurumidza kwekutyisidzira, chero bedzi mafaira ose asina kutapukirwa. Kana hutachiona hwakanyatsogadziriswa muhurongwa (kana mazai akavharidzirwa asingagoni kuenzaniswa nemavambo avo asina kutaurwa), zvikumbiro zvakadaro zvingave zvisina maturo.

Somugumisiro

Chaizvoizvo, mhedziso inongotaura chete chete: kurwisa hutachiona hunodiwa chete padanho rehutachiona, apo chete mafaira ekutanga akavharidzirwa. Nenzira yakawanda, zvakanakisisa kuti usasvinudza zvinyorwa zvekutumira ma-e-mail mharidzo yakagadzirirwa kubva mumasimba asina chokwadi (izvi zvinoshanda chete kune vatengi vakaiswa zvakananga pamakombiyuta - Outlook, Oulook Express, nezvimwewo). Mukuwedzera, kana mushandi wekambani ane ruzivo rwekero revatengi nevashandi, kuzarura "kuruboshwe" mharidzo inenge isingabatsiri zvachose, sezvo vazhinji vacho vari kubhadhara zviratidzo zvinopindirana pamusoro pekusati kuziviswa kwezvakavanzika zvebhizimisi nekuchengeteka.