Monthly Archives: February 2018 - Page 4

Whoever created Defender Ransomware truly has no regard for virtual privacy. This infection corrupts files found on the infected operating system by encrypting data within them. Most other threats of this kind demand a ransom in return of a file decryptor or a decryption key (e.g., LockMe Ransomware or Xorist-Frozen Ransomware). Of course, in most cases, the cyber crooks behind these threats have no intention of keeping their promises and providing the victims with the decryption tools. In reality, decrypting files corrupted by ransomware is usually impossible. The surprising thing is that the threat we are discussing in this report does not even make a request to pay the ransom. On the contrary, the notification represented via a file (“Defender_Ransomware.txt”) created by the infection informs that “THIS RANSOMWARE IS NOT DECRYPTABLE.” Needless to say, the only thing that anyone can do is delete Defender Ransomware. You can scroll to the bottom to find a guide that explains how to remove this malicious infection, but we suggest reading the report first to learn more. Read more »

LockMe Ransomware is a malicious file-encrypting application you could accidentally receive after downloading suspicious data, for example, email attachments from unknown senders, setup files from untrustworthy file-sharing web pages, etc. If it happens, you may lose all of your data located on the infected device as the malware enciphers it with a strong cryptosystem. Such files cannot be opened without a decryption tool and a specific decryption key. Unfortunately, these means might be available only to the cyber criminals who created this malicious application, and they are not sharing them free of charge. Needless to say, even if you can pay the asked ransom, we do not think it would be wise considering there are no refunds and no reassurances. If you cannot decide what to do yet, you should keep reading our report and learn more about LockMe Ransomware. For those who have already decided to eliminate the malware, we would recommend sliding a bit below the text where we will place removal steps. Read more »

Xorist-Frozen Ransomware is yet another variant based on the infamous Xorist Ransomware. We have seen a number of dangerous ransomware programs originating from this base, such as Cryptedx Ransomware and Hello Ransomware. Unfortunately, this dangerous program can encrypt all your important files once it manages to sneak onto your system. Since you will not notice its presence until it is too late, it is not possible to remove Xorist-Frozen Ransomware from your computer without the possibility of losing your files to encryption. Hopefully, though, you have a recently saved backup in cloud storage or on an offline removable drive. Right now, this seems to be the only way for you to be able to recover your files. Our malware experts at anti-spyware-101.com say that they have not found any free tool yet that could help you restore your files. Also, there is no guarantee that if you pay the ransom, you will get the private key needed for decryption. We advise you to remove Xorist-Frozen Ransomware as soon as possible. For the details, please read our full article. Read more »

Ransomware is a lucrative type of malware, and the Tornado ransomware is yet another infection released for monetary gain. The infection encrypts files and drops many ransom notes demanding a ransom fee in return to the encrypted data. The requirements provided by the Tornado ransomware should be disregarded, because the attackers' promise to decrypt file is just a hoax. The possibility of having the files restored is close to zero, so, instead of spending a considerable sum of money for nothing, you should take action to remove the Tornado ransomware. Without a doubt, it is also necessary to ensure that such threats do not manage to find access to the system again in the future. Read more »