Monthly Archives: April 2018

Iron Ransomware is a dangerous malware infection that you need to take seriously since it can cause the loss of all your important files. This malicious program can target hundreds of file extensions to encrypt them in order to extort money from you for the decryption. Our malware experts at anti-spyware-101.com say that this new ransomware threat belongs to the infamous Maktub Ransomware family. It can appear on your system without your knowledge and by the time you realize what has hit you, it will be too late to do anything. Well, there is one thing that you must do actually if you want to use and restore your PC. We recommend that you remove Iron Ransomware from your computer immediately. Of course, you may wrongly believe that paying the ransom fee can get your files back. But let us remind you that in most cases this is not so, unfortunately. It is your choice, though. Please read our full article to figure out how this beast may have entered your computer and how you can remove this vicious ransomware without possibly leaving leftovers. Read more »

Researchers working at anti-spyware-101.com have detected a new ransomware-type infection Nmcrypt Ransomware in the wild. It has turned out that this infection is not exactly a brand new threat since it seems to be a new version of an older crypto-threat NM4 Ransomware. The main thing that distinguishes it from the older version of this ransomware infection is the filename extension it uses. While the previous version used the .NM4 extension to mark encrypted files, Nmcrypt Ransomware appends .nmcrypt to all those files it affects, but there is no doubt that they share the same goal. Cyber criminals develop ransomware infections because they want to obtain money from users, and since they know that it is not so easy to make them send money, they usually set these malicious applications to lock the most valuable files they have. In other words, if the user ever gets infected with crypto-malware, the chances are high that he/she will find all documents, pictures, videos, and many other files encrypted. In such a case, you have only two choices. First, send money to cyber criminals expecting that they will unlock files for you or give you the decryption tool. Second, delete the ransomware infection from your system fully and then restore those affected files from a backup. The choice is yours, so choose wisely. Read more »

Based on the text in the windows displayed by DotZeroCMD Ransomware it seems it is supposed to be a malicious file-encrypting program designed for money extortion. However, even though it asks for a ransom in the mentioned notes, it does not appear to be able to encipher any data even though the displayed texts tell a different story. Thus, before you start to panic or think about paying the ransom, we urge you to check the files on the infected device first. If they can be opened and the system seems to be able to recognize them, as usual, it means DotZeroCMD Ransomware did not do anything to them. There is a possibility the malware could be updated later on, but until it does, we would recommend not to waste any time with it and erase it immediately. In fact, even if it would encipher your data, we would advise removing it just the same since there is always a chance the hackers behind the malware might scam the victim. As always to learn how to eliminate this malicious program we invite you to follow the instructions located below the text. Read more »

Scorpionlocker Ransomware is also known as H34rtbl33d Ransomware. The researchers who encountered the threat for the first time noticed it encrypts files and appends .H34rtBl33d extension at the end of their titles, which is why they decided to name the malware after it. Nevertheless, after some time it appeared that the malicious application could append different extensions, and it was decided it would be best to call it differently. The name Scorpionlocker Ransomware comes from a particular server URL address (h34rtbl33d.scorpionlocker.xyz) used by the cybercriminals who created the infection. If you continue reading our article, we will tell you more important information about the malicious applications, such as its working manner, possible distribution methods, etc. At the end of this page, we will also add manual removal instructions for users who decide to get rid of the infection instead of paying the ransom and putting their savings at risk, so if you need any assistance with its deletion feel free to use these steps. Read more »