Igciwane .cbf (coder-virus): wokufunda. Inwebisa .cbf

Kusukela 2014, eziningana uhlobo olusha amagciwane zakamuva, cryptographers njengokhokho bawo kuwebhu - igciwane ngokuthi I Love You. Ngeshwa, CBF-virus cipher ngisho wokufunda izindlela etholakalayo we Onjiniyela ehamba phambili-anti-virus, isofthiwe namuhla akunakwenzeka. Nokho, ezinye izincomo ukubuyisela idatha ebethelwe sisekhona.

Virus CBF: amajikijolo inkambu

Kuze kube manje, kukhona okungenani ezintathu igciwane-extortionist. Lokhu igciwane CBF, kanye amagciwane XTBL futhi Vault. Benza cishe ngokufana ncamashí, ngemva ukunikela wemfihlo amafayela ezibalulekile futhi imibhalo ukukhokhela kokuthola ikhodi bazokwazi ukukhiqiza idatha ukuqaqwa (ngokuvamile, ngemva nesenzakalo imiyalezo on the qapha iza incwadi bafuna imali ukuqaqwa).

Maye, ukuzikhohlisa, abasebenzisi ezisheshayo akhokhe isamba n-th noma uthumele izibonelo abahlaseli amafayela gciwane. Kodwa uma ukuthola lolu lwazi izinkampani eziningi iyimfihlo, futhi uma uthumela iba yomphakathi.

Yini igcwele Ukungena igciwane ku uhlelo ikhompyutha noma inethiwekhi?

Igciwane ezimweni eziningi uthola ohlelweni ngokusebenzisa incwadi wathola nge-imeyili, okungenani - ngokuvakashela Amakhasi ezingabazekayo kuwebhu.

Phawula ukubukeka usongo bengayi wonke umuntu, ngisho nabantu abanamandla kakhulu anti-virus iphakethe. Ngaphezu kwalokho, ngesikhathi usaqala kakhulu it is ayitholiwe amathuluzi ngisho ephathekayo efana Dr. I-Web Yelaphani It!. Ngenxa yokuthi igciwane liba self-ukuzandisa, ekugcineni tentacles ithumba ohlelweni lonke.

Lapho izimpawu zokuqala maduze kwenzeke ibe umthwalo ngokweqile CPU, kanye ukusetshenziswa okungagunyaziwe RAM. Kulokhu, isibonelo, emnyango okufanayo "umphathi wokusebenza" ungabona inqubo okuthiwa Build.exe. By the way, lwemibhalo eyinhloko umlawuli noma ifolda yamanje umsebenzisi wadala amafayela Uhlelo kwesigaba x86, okuyinto ekhona RarLab ifolda equkethe ifayela oyifunayo Build.exe, checkdata.dif futhi winrar.tmp. Ngaphezu kwalokho, Yakha ifayela kuvela "ideskithophu". Khona-ke, isiphequluli esetshenziswa igagasi World Wide Web kungase kuvele izithombe eziqukethe porn noma izixhumanisi zamawebhusayithi ngokuqukethwe zangasese.

Lokhu kulandelwa ukutheleleka. Ngokuvamile, amafayela uqambe kabusha izicelo Office ezifana Microsoft Excel, Finyelela futhi iZwi. Futhi, izinkinga kungenzeka yolwazi kanye .dbf format .db (ngokuvamile. "1c: Accounting" ukuze isandiso main unezela .cbf, kodwa ukufunda (evulekile) la mafayela akunakwenzeka, ngoba CBF-virus cipher ukuqhaqha itheleleke izinto akakwazi (nje asazi kanjani). Yini okufanele ngiyenze kulokhu?

CBF-virus cipher: kanjani ukususa futhi ukuthi ukukwenza?

Okokuqala, kungase kudingeke uqonde ngokucacile ukuthi kukhona kudingeka isinyathelo ngangokunokwenzeka kahle. Uma igciwane kunqunywa isofthiwe, ke ayikwazi ukususwa !!! Kuyadingeka ukubeka usongo ku ngokuhlukaniswa, okuyinto samanje cishe zonke izicelo yalolu hlobo.

Ukususwa noma yokuhlanza ngeke kuholele yokuthi izakhi eziyinhloko elisebenzisekayo uzonyamalala, kodwa ulwazi ngekhodi usazoba belingafundeki. Kodwa kusukela ngokuhlukaniswa ungathumela ifayela ukuhlola online lab umkhiqizi unqulo wesi arab efakwe ohlelweni. Kodwa kuyasiza ngaso sonke isikhathi.

Kanjani ukwenza ngendlela elula?

Ngakho, ukunwetshwa amafayela igciwane .cbf kakade ngokwesabelo esigunyaziwe. Kuye isikhathi sokusebenza kungenzeka lezi zimo ezimbalwa ezedlulele: noma amafayela noma uvimba yokufakwayo Windows nje ngekhodi (ngisho "Ideskithophu" ayitholakali).

Ithi ngesikhathi esisodwa: mayelana nanoma yisiphi ukudluliswa kweemali kanye kungaba kungabaza. Okokuqala kungcono ukubheka database ku-intanethi kusukela kwenye ikhompyutha, aqukethe iningi amakhodi eyaziwa ukuvula ukufinyelela (ungasebenzisa okungenani Unlocker sigaba esemthethweni Dr. Web site). Yiqiniso, akubona yokuthi lamakhodi uzokwenza. Kudingekile ukuba aphathe uhlelo sakhe.

uhlelo Buyisela

CBF-virus nakancane (noma kunalokho, ngemiphumela nethonya layo amafayela), abanye ngendlela esezingeni akusebenzi, ngoba usebenzisa i-algorithm 1024-bit ukubethela. Uma othile akazi, namuhla langempela 256-bit AES uhlelo. Ungazama alulame idatha yoqobo ngokufinyelela Windows Buyisela.

Uma bangangena, ungathola kulesi sigaba ku "Control Panel" futhi ukubuyela emuva kusukela okuseshwa ngaphambi ukutheleleka. Uma ungene ngemvume umyalezo Windows ivinjiwe afune izinto ngenkani kwabanye ukudluliswa kwemali, ungazama izikhathi eziningana ukuphoqelela kabusha leli ukuphela kukhompyutha noma i-laptop. Ukwenza lokhu kuyodingeka uma nje uhlelo "hhayi sesivuthiwe" ukutakula ikumodi othomathikhi. Ngokwemvelo, ungazama ukusebenzisa disk yokutakula, zama ukwenza izenzo kanye umugqa wemiyalo nekubhala ngokuphelele imikhakha ebhuthini, nakuba amathuba okuphumelela incane. Kuyinto kuphela okwakuhlalwa kuzo lapho kusaqalwa, lapho igciwane coder CBF kuphela abangena ohlelweni noma inethiwekhi.

Buyisela izinguqulo ezandulele amafayela

Uma ukubuyela emuva ohlelweni akusebenzi, uyawasebenzisa amathuba okuhlanganyela ekhethekile ukubuyisela izinguqulo ezandulele amafayela, okuhlanganiswayo Windows uqobo.

Ukuze wenze lokhu nge "Explorer" ukuya izakhiwo kudiski ekhethiwe noma ukwahlukanisa bese usebenzisa Langaphambilini amafayela lwakamumva ithebhu. Ngemva lezi zenzo, futhi, kudingeka ukhethe okuseshwa kuzo, bese uvula bese ukopisha amafayela ezidingekayo kwenye indawo. Le ndlela ezimweni eziningi ngempumelelo ngaphezulu.

Ukusebenzisa decoders

Uma sicabangela izixazululo olunikezwa Onjiniyela anti-virus software, ukunwetshwa CBF-virus, ungazama ukususa esebenzisa ekhethekile isicelo-decoders (kodwa esisemthethweni kuphela, kungeyona inkambiso ngentuthuko like decoders Lokudabuka ongaziwa).

Nokho, uma Kuyaphawuleka ukuthi kuphela Umsebenzi inqobo version olusemthethweni efakwe igciwane Enani esifanele ukhiye welayisense. Uma kungenjalo, ungenza umonakalo. Igciwane umane asuswe, bese ngisho ukuthi kungenzeka ukuxhumana abahlaseli ngeke. Kukhona uyoba ukubhekana kabusha ukufakwa ohlelweni lonke.

Okungamelwe ukwenze noma kunjalo?

Njengoba kusobala CBF-virus cipher ukuqhaqha amafayela, kunjalo futhi elinegciwane wehluleka. Kufanele futhi unake izenzo akunconywa ukwenza kakhulu. Qaphela amaphuzu abaluleke kakhulu:

• zisebenzisa decoders nge esakhelwe "kreknutoy" version of the unqulo wesi arab kuphela;
• wethe ifayela elinegciwane ukushintsha isandiso;
• ukusula inqolobane kanye isiphequluli umlando ukuze uthumele amafayela ezisolisayo for ukuhlaziya kunjiniyela isofthiwe ye-antivirus;
• pereustanavka OSes ngaphandle ufometha amadiski kanye ngodonga okunengqondo;
• ukuthumela imali nencazelo samafayela kwimithombo engaziwa noma osolisayo, njenge-e-mail njenge iizomer@aol.com nabanye ngisho postscript.

Ngokuvamile, kufanele kuqondwe ukuthi CBF-virus cipher nakancane bebodwa nje ngeke zisebenze. Kungcono ubheke website esemthethweni izinkampani unqulo wesi arab efana "Kaspersky", lapho isigaba ekhethekile, ungakwazi ushiye amafayela inkinga ukuhlaziya, noma uthumele amafayela yedwa ngokuqondile hlelo.

Nokho, (nangabe sivunyelwa bonke onjiniyela) kungcono ukwenza ifayela lokuqala onegciwane, uma ikhona, bathi ngesimo ikhophi kwimidiya ezinye esikhiphekayo. Kulokhu, emagama iyoba lula kakhulu, nakuba ayengazi yokuthi amafayela umsebenzisi oyifunayo, buyobuyiselwa.

Njengoba ojwayelekile, futhi kuqinisekisa iningi impendulo yomsebenzisi, ukwesekwa inkonzo ngokuvamile buthule isikhathi eside, futhi uma decrypts idatha, kumayelana kufayela elilodwa. Futhi yini okufanele uyenze ne amaqoqo amashumi noma amakhulu gigabytes? Le ncwadi, ngisho "ifu" amasevisi ekhethekile ukuthumela, ingasaphathwa ukubuyisela, kumane ongenangqondo. Kodwa ake Ngethemba ukuthi onjiniyela namanje ukuthola ukwelashwa amafayela onegciwane kanye indlela yokulwisana ezinsongweni lolu hlobo Ukungena ku computer namanethiwekhi.