Ссылка на зашифрованный файл -
Стоит отметить, что .png почему-то не зашифрованы.
Поставщик ИТ-решений PRO32 сообщает вам, что после 17 лет сотрудничества мы более не являемся эксклюзивным дистрибьютором программных продуктов словацкого разработчика ESET в России, Республике Беларусь, Казахстане, Азербайджане, Узбекистане, Кыргызстане, Таджикистане, Туркменистане, Молдове, Грузии и Армении.
Купить и продлить лицензии ESET на нашем сайте больше нельзя.
Предлагаем вам попробовать новый антивирус от компании PRO32.
Продукты PRO32 — это технологичные решения, надежная защита от киберугроз и максимальная производительность устройств на Windows / Android.
Для действующих клиентов ESET мы предлагаем промокод на скидку в размере 15% — ESET15. Скопируйте его и после добавления товара в корзину, не забудьте его применить в корзине.
Цитата |
---|
Identified by ransomnote_filename: Your files are locked !!!!.txt ransomnote_email: [email protected] |
Код |
---|
;uVS v4.0.4 [http://dsrt.dyndns.org] ;Target OS: NTv6.1 v400c OFFSGNSAVE ;------------------------autoscript--------------------------- delall %SystemRoot%\SVCHOST.COM zoo %SystemDrive%\USERS\МИХАИЛ\APPDATA\LOCAL\MEDIAGET2\MEDIAGET-UNINSTALLER.EXE addsgn 9252771A116AC1CC0B44554E33231995AF8CBA7E8EBD1EA3F0C44EA2D3388D5DF8652EEF3F559D492A5BF198CD08CA1481CE336395DB6B5F26028CA4D985CC8F 14 Win32:FakeSys-BF [PUP] 7 chklst delvir deldirex %SystemDrive%\USERS\МИХАИЛ\APPDATA\LOCAL\MEDIAGET2 deldirex %SystemDrive%\USERS\МИХАИЛ\APPDATA\LOCAL\MEDIA GET LLC\MEDIAGET2 delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DAHNPHCMHMHCJJCJHMNNJJLBMAELJECGA%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DEFAIDNBMNNNIBPCAJPCGLCLEFINDMKAJ%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DEHFJIHAHBPHDPLJPIADBKMGMHNFEHHGI%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTP://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DHDOKIEJNPIMAKEDHAJHDLCEGEPLIOAHD%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DMFMJPFOGGIKOLKFILOFBPGCNHDCGAHIB%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DOELPKEPJLGMEHAJEHFEICFBJDIOBDKFJ%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DPFJGIBHMCGNCMJHDODPAOLFBJPJJAJAL%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DPGAIDLFGJKMEENDHKNAFAHPPLLBNIEJM%26INSTALLSOURCE%3DONDEMAND%26UC delref %SystemDrive%\USERS\МИХАИЛ\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\AHNPHCMHMHCJJCJHMNNJJLBMAELJECGA\12.0.8_0\ПОИСК MAIL.RU delref HTTP://WWW.SWEET-PAGE.COM/?TYPE=HP&TS=1405869387&FROM=COR&UID=ST3250620AS_9QF6SWR9XXXX9QF6SWR9 delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DHCJJAAJFLHELLMCFCECOJIHHMDBJMMLM%26INSTALLSOURCE%3DONDEMAND%26UC delref HTTPS://CLIENTS2.GOOGLE.COM/SERVICE/UPDATE2/CRX?RESPONSE=REDIRECT&PRODVERSION=38.0&X=ID%3DLMJEGMLICAMNIMMFHCMPKCLMIGMMCBEH%26INSTALLSOURCE%3DONDEMAND%26UC apply regt 27 regt 28 regt 29 ; AnySend, Any file, Any size, Anywhere! exec C:\Program Files (x86)\AnySend\uninstall.exe deltmp delref {23E5D772-327A-42F5-BDEE-C65C6796BB2A}\[CLSID] delref {177AFECE-9599-46CF-90D7-68EC9EEB27B4}\[CLSID] delref {CEF51277-5358-477B-858C-4E14F0C80BF7}\[CLSID] delref {59116E30-02BD-4B84-BA1E-5D77E809B1A2}\[CLSID] delref G:\НОВАЯ ПАПКА\HINSTALL.EXE delref %SystemDrive%\USERS\МИХАИЛ\DOWNLOADS\EWB512.EXE delref %SystemDrive%\PROGRAM FILES (X86)\MAPLE 13\UNINSTALL_MAPLE 13\UNINSTALL MAPLE 13.EXE delref %SystemDrive%\PROGRAM FILES (X86)\XILISOFT\VIDEO CONVERTER STANDARD\UNINSTALL.EXE delref %SystemDrive%\PROGRAM FILES (X86)\QGNA\UNINSTALLER.EXE delref %SystemDrive%\GAME\MATHWORKS MATLAB R2016A\MATHWORKS MATLAB R2016A.EXE delref %SystemDrive%\GAME\MICRO-CAP 9 PRO\MC9.0.0.0 CD-CONTENTS\SETUP.EXE delref %SystemDrive%\GAME\HDMI_R270.EXE delref %SystemDrive%\PROGRAM FILES (X86)\NATIONAL INSTRUMENTS\SHARED\NIUNINSTALLER\UNINST.EXE delref %SystemDrive%\USERS\МИХАИЛ\DOWNLOADS\REALTEK_HD_AUDIO_VISTA_WIN7_WIN8_32BIT-64BIT (1).EXE delref %SystemDrive%\GAME\MAPLE 10 RUS\MAPLESOFT MAPLE V10.0\LICENSE.EXE delref %SystemRoot%\SYSWOW64\PEERDISTSVC.DLL delref %SystemRoot%\SYSWOW64\DRIVERS\NDIS.SYS delref %SystemRoot%\SYSWOW64\UMPO.DLL delref %SystemRoot%\SYSWOW64\IPHLPSVC.DLL delref %SystemRoot%\SYSWOW64\CSCSVC.DLL delref %SystemRoot%\SYSWOW64\DRIVERS\RDVGKMD.SYS delref %SystemRoot%\SYSWOW64\PNRPSVC.DLL delref %SystemRoot%\SYSWOW64\DRIVERS\PACER.SYS delref %SystemRoot%\SYSWOW64\LSM.EXE delref {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B}\[CLSID] delref {166B1BCA-3F9C-11CF-8075-444553540000}\[CLSID] delref {233C1507-6A77-46A4-9443-F871F945D258}\[CLSID] delref {4063BE15-3B08-470D-A0D5-B37161CFFD69}\[CLSID] delref {444785F1-DE89-4295-863A-D46C3A781394}\[CLSID] delref {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA}\[CLSID] delref {D27CDB6E-AE6D-11CF-96B8-444553540000}\[CLSID] delref {EBA7A1E6-E69D-4BA5-B291-95782A004604}\[CLSID] delref %SystemRoot%\SYSWOW64\WIN32K.SYS delref {640167B4-59B0-47A6-B335-A6B3C0695AEA}\[CLSID] delref {E0DD6CAB-2D10-11D2-8F1A-0000F87ABD16}\[CLSID] delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\CHROME\APPLICATION\57.0.2987.133\INSTALLER\CHRMSTP.EXE delref %SystemRoot%\SYSWOW64\BLANK.HTM delref {E6FB5E20-DE35-11CF-9C87-00AA005127ED}\[CLSID] delref {B19ED566-D419-470B-B111-3C89040BC027}\[CLSID] delref {10921475-03CE-4E04-90CE-E2E7EF20C814}\[CLSID] delref {61628E2A-4FF9-4454-992D-D92A8CD27399}\[CLSID] delref %Sys32%\BLANK.HTM delref %Sys32%\DRIVERS\RDVGKMD.SYS delref %SystemDrive%\USERS\МИХАИЛ\APPDATA\ROAMING\SYSTEM\SMSS-DOOOMS.VBS delref %SystemDrive%\PROGRAM FILES\IIS\MICROSOFT WEB DEPLOY V3\MICROSOFT.WEB.DEPLOYMENT.TRACING.DLL delref %Sys32%\MSSPELLCHECKINGFACILITY.DLL delref %SystemDrive%\PROGRAM FILES\INTERNET EXPLORER\F12.DLL delref %Sys32%\DRIVERS\TSUSBHUB.SYS delref %SystemDrive%\PROGRAM FILES (X86)\CST STUDIO SUITE 2016\AMD64\CSTINFO_AMD64.DLL delref SLDWORKS SHELL EXTENSION\[CLSID] delref {3B5B973C-92A4-4855-9D3F-0F3D23332208}\[CLSID] delref HELPSVC\[SERVICE] delref MBAMSERVICE\[SERVICE] delref SACSVR\[SERVICE] delref TBS\[SERVICE] delref VMMS\[SERVICE] delref MESSENGER\[SERVICE] delref RDSESSMGR\[SERVICE] delref %SystemDrive%\IMMERSIVEHOST\IMMERSIVEELEVATIONSERVICE.EXE delref %Sys32%\PSXSS.EXE delref %SystemDrive%\USERS\МИХАИЛ\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.33.3\PSUSER_64.DLL delref %SystemDrive%\USERS\МИХАИЛ\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.32.7\PSUSER_64.DLL delref %SystemDrive%\USERS\МИХАИЛ\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.33.3\PSUSER.DLL delref %SystemDrive%\USERS\МИХАИЛ\APPDATA\LOCAL\GOOGLE\UPDATE\1.3.32.7\PSUSER.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.26.9\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.1\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.3\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.27.5\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.15\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.1\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\IOBIT\IOBIT UNINSTALLER\IOBITUNINSTALER.EXE delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.25.11\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.23.9\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.24.7\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.25.5\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.13\PSMACHINE_64.DLL delref %Sys32%\SHAREMEDIACPL.CPL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.5\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.30.3\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.24.15\PSMACHINE_64.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.26.9\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.1\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.33.3\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.32.7\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.22.5\PSMACHINE.DLL delref %SystemDrive%\EZ3D2009\EVPRINT.OCX delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.21.165\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.27.5\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.15\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.1\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.21.153\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\CST STUDIO SUITE 2016\MWS_IP.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.25.11\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.23.9\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.24.7\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.25.5\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.28.13\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\CST STUDIO SUITE 2016\CST DESIGN ENVIRONMENT.EXE delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.29.5\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.31.5\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\CST STUDIO SUITE 2016\MWS.EXE delref %SystemDrive%\PROGRAM FILES (X86)\MICROSOFT VISUAL STUDIO\SHARED\COMMON7\IDE\BLEND.EXE delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.30.3\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.22.3\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.24.15\PSMACHINE.DLL delref %SystemDrive%\PROGRAM FILES (X86)\GOOGLE\DRIVE\GOOGLEDRIVESYNC.EXE delref {5A8FF410-F3CE-4844-B31B-F18D911239E8}\[CLSID] delref {7AEFE841-DCA1-4A95-80CB-BE935D020300}\[CLSID] delref %SystemDrive%\PROGRAM FILES (X86)\ACTUAL WINDOW MINIMIZER\UNINS000.EXE delref %SystemDrive%\PROGRAM FILES (X86)\ACTUAL WINDOW MINIMIZER\ACTUALWINDOWMINIMIZERCONFIG.EXE delref %SystemDrive%\PROGRAM FILES (X86)\ACTUAL WINDOW MINIMIZER\ACTUALWINDOWMINIMIZERCONFIG.URL delref %SystemDrive%\DEV-CPP\DEVCPP.EXE delref %SystemDrive%\PROGRAM FILES\AMD\AMDPRW.EXE delref %SystemDrive%\GAME\ASSASSINS CREED IV BLACK FLAG\UNINS000.EXE delref %SystemDrive%\DEV-CPP\UNINSTALL.EXE delref %SystemDrive%\GAME\CALL OF DUTY ADVANCED WARFARE\S1_SP64_SHIP.EXE delref %SystemDrive%\PROGRAM FILES (X86)\GOPRO\GOPRO STUDIO\UNINST.EXE delref %SystemDrive%\PROGRAM FILES (X86)\HAALI\MATROSKASPLITTER\GDSMUX.EXE delref %SystemDrive%\PROGRAM FILES (X86)\HAALI\MATROSKASPLITTER\UNINSTALL.EXE delref %SystemDrive%\PROGRAM FILES (X86)\NVIDIA CORPORATION\NVIDIA GEFORCE EXPERIENCE\GFEXPERIENCE.EXE delref %SystemDrive%\PROGRAM FILES (X86)\ORIGIN\ORIGINER.EXE delref %SystemDrive%\GAME\R.G. CATALYST\WOLFENSTEIN - THE NEW ORDER\WOLFNEWORDER_X64.EXE delref %SystemDrive%\GAME\R.G. CATALYST\WOLFENSTEIN - THE NEW ORDER\UNINSTALL\UNINS000.EXE delref %SystemDrive%\GAME\FAR CRY 3\BIN\FARCRY3_D3D11.EXE delref %SystemDrive%\GAME\FAR CRY 3\BIN\FARCRY3.EXE delref %SystemDrive%\GAME\FARCRY4\BIN\LAUNCHER.EXE delref %SystemDrive%\GAME\SOUTH PARK.THE STICK OF TRUTH.V 1.0.1343 + 2 DLC\SOUTH PARK - THE STICK OF TRUTH.EXE delref %SystemDrive%\GAME\SOUTH PARK.THE STICK OF TRUTH.V 1.0.1343 + 2 DLC\UNINSTALL\UNINS000.EXE delref %SystemDrive%\GAME\CALL OF DUTY.GHOSTS.V 1.0.642115\IW6SP64_SHIP.EXE delref %SystemDrive%\GAME\CALL OF DUTY.GHOSTS.V 1.0.642115\UNINSTALL\UNINS000.EXE delref %SystemDrive%\PROGRAM FILES (X86)\MICROSOFT VISUAL STUDIO 12.0\COMMON7\IDE\DEVENV.EXE ;------------------------------------------------------------- restart |