Monthly Archives: February 2018

Mobef-salam Ransomware is a malicious file-enciphering program that may lock your private files and leave a ransom note called READ.4YOU. Our researchers at Anti-spyware-101.com say the malware is a bit different from other ransomware applications we usually encounter since it does not append any second extension at the end of enciphered files’ titles. Therefore, to realize which documents, photos, pictures, and so on are encrypted the user has to try opening them. Obviously, encrypted files are the ones you cannot launch. The only way to restore them is with a particular decryption tool and a unique decryption key, but sadly both of them are available only to the malware’s developers. On the other hand, if you backed your data, you should be able to recover it with no trouble. Just before, transferring backup copies or new files on the infected computer, we would recommend erasing Mobef-salam Ransomware for safety precautions. This you can do while looking at the instructions available below or with a legitimate antimalware tool. Read more »

Saturn Ransomware is a ransomware-as-a-service infection that was customized to fit the needs of its distributors. The program will trick you into installing it on your system, and then it will encrypt most of your files. That will be done to terrorize you into paying a ransom fee that should “release” the encrypted data. However, computer security experts would tell you that paying the ransom would not solve your problems. The thing you should definitely do right now is remove Saturn Ransomware for good. Deleting this infection is not that complicated, but there is always a chance that you will have to give up on your files. Read more »

If you find out that Thanatos Ransomware has managed to slither onto your computer, you may have to say goodbye to all your important files. This ransomware can encrypt your files and demand a ransom fee from you so that you can get the decryption key. Our malware specialists at anti-spyware-101.com say that based on the amount of the ransom as well as the e-mail address used, these cyber criminals might come from Russia even though the name of this threat is Greek for "death." Of course, all this could be a diversion so we cannot really confirm this. It seems that your encrypted files might be decryptable and you can find information about it on the web. However, if you are not an advanced computer user, we do not advise you to try to search for such information or free decryption toll, either, because it is not without risk. Hopefully, you have a backup of your important files so that you can use clean files to recover them. If not, this may be a good time to start saving a backup if you do not want to lose files again. We do not advise you to pay the ransom. We strongly recommend that you remove Thanatos Ransomware from your computer immediately. Read more »

Driedsister Ransomware is a new danger that mostly threatens Japanese computer users. This ransomware can crawl onto your computer and encrypt all your documents and photos in no time. Just because these attackers mainly target Japanese users, it does not meant that this threat cannot infect elsewhere as well. Its original name is "下 物 妹" (“Irisimo imoto”). This dangerous malware infection has one strange feature: It does not demand a ransom fee. It does display a sort of ransom note, but there is no mention of a ransom or that you could get a decryption tool or the key in any way. This also means that right now it is not possible to recover your files that have been encrypted by this ransomware program. Our malware specialists at anti-spyware-101.com say that it is still essential that you remove Driedsister Ransomware if you want to be able to use your computer. Please read on to learn more about this severe threat. Read more »

Cyber criminals are exploiting security vulnerabilities and backdoors to spread yet another file-encrypting infection, and it is called Russenger Ransomware. It is not known how exactly this malicious threat spreads, and that, in part, might be due to the fact that different methods could be employed. Hopefully, you can take care of your virtual security to ensure that this dangerous threat cannot slither in. You can do that by installing trustworthy security software. It is also important that you are cautious yourself. For example, many victims let in ransomware by opening corrupted spam email attachments. Random links and files could be used to distribute malware. It could also be concealed as beneficial software, and could be spread using attractive software bundles. Hopefully, you still have time to keep this malware away. If your operating system was already corrupted, undoubtedly, you want to remove Russenger Ransomware as soon as possible. The bad news is that your files will not be decrypted after you delete the malware. Keep reading if you want to learn more about this malicious threat. Read more »