Skip to content

Commit

Permalink
now only 2 scripts
Browse files Browse the repository at this point in the history
  • Loading branch information
Chromos-Def committed Mar 5, 2019
1 parent 1a55e03 commit fbf51b3
Show file tree
Hide file tree
Showing 9 changed files with 26 additions and 119 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -4,12 +4,22 @@ SETLOCAL
SET "HOSTS=%WinDir%\System32\drivers\etc\hosts"
SET "TEMP_HOSTS=%TEMP%\%RANDOM%__hosts"
echo.
echo.
echo UNBLOCK Redshell Spyware
echo.
echo.
FINDSTR /V "#Start of Block Redshell Spyware Entries# & redshell.io & api.redshell.io & treasuredata.com & api.treasuredata.com & in.treasuredata.com & cdn.rdshll.com & t.redshell.io & innervate.us & #End of Block Redshell Spyware Entries#" "%HOSTS%" > "%TEMP_HOSTS%"
COPY /Y "%TEMP_HOSTS%" "%HOSTS%"
echo.
echo.
echo Hosts file entries has been deleted to UNBLOCK Redshell spyware.
echo.
echo.
netsh advfirewall firewall delete rule name="Block-Redshell-Spyware" remoteip=138.91.197.151,40.118.187.121,23.185.0.2,34.194.99.1,52.3.23.198,54.80.12.77,34.199.53.125,50.17.28.69,52.0.125.186,34.200.80.85,34.202.72.93,54.174.193.179,40.71.103.150,40.121.210.226
echo.
echo.
echo Firewall entries has been deleted to UNBLOCK Redshell spyware.
echo.
echo.
pause
exit /B
Original file line number Diff line number Diff line change
Expand Up @@ -2,8 +2,10 @@
echo.
set hostspath=%windir%\System32\drivers\etc\hosts
echo.
echo.
echo BLOCK Redshell Spyware
echo.
echo.
echo.>> %hostspath%
echo #Start of Block Redshell Spyware Entries# >> %hostspath%
echo 0.0.0.0 redshell.io >> %hostspath%
Expand All @@ -17,7 +19,16 @@ echo 0.0.0.0 innervate.us >> %hostspath%
echo #End of Block Redshell Spyware Entries# >> %hostspath%
echo.>> %hostspath%
echo.
echo.
echo Hosts file entires has been added to BLOCK Redshell spyware.
echo.
echo.
netsh advfirewall firewall add rule name="Block-Redshell-Spyware" dir=in interface=any action=block remoteip=138.91.197.151,40.118.187.121,23.185.0.2,34.194.99.1,52.3.23.198,54.80.12.77,34.199.53.125,50.17.28.69,52.0.125.186,34.200.80.85,34.202.72.93,54.174.193.179,40.71.103.150,40.121.210.226
netsh advfirewall firewall add rule name="Block-Redshell-Spyware" dir=out interface=any action=block remoteip=138.91.197.151,40.118.187.121,23.185.0.2,34.194.99.1,52.3.23.198,54.80.12.77,34.199.53.125,50.17.28.69,52.0.125.186,34.200.80.85,34.202.72.93,54.174.193.179,40.71.103.150,40.121.210.226
echo.
echo.
echo Firewall entries has been added to BLOCK Redshell spyware.
echo.
echo.
pause
exit /B
39 changes: 0 additions & 39 deletions 2-Firewall-Install-Block-Redshell.bat

This file was deleted.

24 changes: 0 additions & 24 deletions 2-Firewall-Uninstall-Block-Redshell.bat

This file was deleted.

8 changes: 0 additions & 8 deletions RAW/Hosts-Block-Redshell-RAW.txt

This file was deleted.

15 changes: 0 additions & 15 deletions RAW/IPs-Block-Redshell-RAW.txt

This file was deleted.

10 changes: 5 additions & 5 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Block-Redshell
Blocks Redshell Spyware using batch files - install & uninstall included
Blocks Redshell Spyware using batch script files - install & uninstall included

# What is Redshell?
https://www.reddit.com/r/Steam/comments/8pud8b/psa_red_shell_spyware_holy_potatoes_were_in_space/
Expand All @@ -12,12 +12,12 @@ The **_Install_** scripts will block the Redshell spyware at a Hosts file & Wind
The **_Uninstall_** scripts will unblock the Redshell spyware. (But why? - see **Warning** below)

# Install
- Right click **1-Hosts-Install-Block-Redshell.bat** and then click **_run as administrator_.**
- Right click **2-Firewall-Install-Block-Redshell.bat** and then click **_run as administrator_.**
- Right click **1-Install-Block-Redshell.bat** and then click **_run as administrator_.**
*Think in binary - 1 is On*

# Uninstall
- Right click **1-Hosts-Uninstall-Block-Redshell.bat** and then click **_run as administrator_.**
- Right click **2-Firewall-Uninstall-Block-Redshell.bat** and then click **_run as administrator_.**
- Right click **0-Uninstall-Block-Redshell.bat** and then click **_run as administrator_.**
*Think in binary - 0 is Off*

# Warning
Some games will not launch or work while blocking Redshell, because they unfortunately use this spyware to collect telemetry on **YOU**, so I have included the Uninstall batch files.
28 changes: 0 additions & 28 deletions push-git-IGNORE.sh

This file was deleted.

File renamed without changes.

0 comments on commit fbf51b3

Please sign in to comment.