රැන්සම්වෙයාර් පරීක්ෂණ මෘදුකාංග හදන අය​ට

helphelp1

Well-known member
  • Sep 18, 2017
    1,451
    997
    113
    රැන්සම්වෙයාර් පරීක්ෂණ මෘදුකාංග හදන අය​ට

    කාටහරි පුලුවන් වෙයි මේ ගැටලුව විසදන්න​. ඔයාල අවුල විසදුවොත් කියන්න​



    මට මේ වීඩියෝ එක එව්වා හැකර්








    system ෆයිල් වලටත් ආසාදනය වෙලා මේ විදියට කරා ෆයිල් ටික හරි ගියේ නැහැ







    Virus Decrypt Script මේ විදියට කරා ෆයිල් ටික හරි ගියේ නැහැ. කෝඩ් එක දැම්මා Download karanna oni naa






    attrib -r %WINDIR%\system32\drivers\etc\hosts

    SET NEWLINE=^& echo.

    FIND /C /I "tonec.com" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 tonec.com>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "www.tonec.com" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 www.tonec.com>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "www.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 www.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "secure.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 secure.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "www.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 www.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "secure.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 secure.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "mirror.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 mirror.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "mirror2.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 mirror2.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "mirror3.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 mirror3.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    attrib +r %WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "www.tonec.com" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 www.tonec.com>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "www.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 www.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "secure.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 secure.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "www.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 www.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "secure.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 secure.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "mirror.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 mirror.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "mirror2.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 mirror2.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "mirror3.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 mirror3.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    attrib +r %WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "www.tonec.com" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 www.tonec.com>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "www.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 www.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "secure.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 secure.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "www.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 www.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "secure.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 secure.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "mirror.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 mirror.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "mirror2.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 mirror2.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "mirror3.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 mirror3.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    attrib +r %WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "www.tonec.com" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 www.tonec.com>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "www.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 www.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "secure.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 secure.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "www.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 www.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "secure.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 secure.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "mirror.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 mirror.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "mirror2.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 mirror2.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    FIND /C /I "mirror3.CSCKKXK" %WINDIR%\system32\drivers\etc\hosts
    IF %ERRORLEVEL% NEQ 0 ECHO ^127.0.0.1 mirror3.CSCKKXK>>%WINDIR%\system32\drivers\etc\hosts

    attrib +r %WINDIR%\system32\drivers\etc\hosts
    ren *.CSCKKXK *.mp3
     

    imhotep

    Well-known member
  • Mar 29, 2017
    14,882
    8
    35,527
    113
    Just Snake Oil..........

    I have no idea where you got this from... But a sure way of getting infected again, by running scripts from unknown sources.:P

    Only if you are encrypted using an offline key, then some decryptors work. You are not. So nothing can be done by searching all over the net and by trying in stupid scripts which does nothing. (lucky that it does nothing as it could do much more)

    If a tool is developed it will be by Crypto experts. Moreover, lezp uses an AES256 key.
    Do you believe anyone can decrypt 256 bit encryption with a PC at home?
    Maybe one day if someone figures out a side channel attack or some weakness in the crypto scheme itself then there will be some hope for decryption.

    PS: Forgot to add - If some day if the hackers decide to release the keys - because one of them recently did so by releasing 750,000 decryption keys - then the decryption software can be updated to reflect the changes will enable the decryption of old files.
     
    Last edited: