Monthly Archives: July 2018 - Page 2

The Brotherhood Ransomware is a file-encrypting threat our researchers encountered recently. According to them, it is doubtful the malicious application is being distributed yet as they believe it is still in the development stage. If you read the rest of our article, we will explain to you why we think the malware is not finished yet and how it works at the moment. What’s more, at the end of this article you should find our prepared deletion instructions. They might help users to get rid of The Brotherhood Ransomware if the hackers start distributing it. However, it is essential to understand the given steps might not necessarily work because if the malicious application ever gets finished, its working manner could change as well, for example, it could place data on the system that we would not expect to see at the moment of writing. Therefore, it might be safer to use a legitimate antimalware tool instead. Read more »

Scarab-Bin Ransomware could change your Desktop picture with an image that should have a text on it saying: “Hello my friend! For instructions for decrypting files, please write here: mrbin775@gmx.de mrbin775@protonmail.com.” Unfortunately, users who encounter this malicious application might need decryption tools since the infection locks various private files with a secure encryption algorithm. Nonetheless, we would still recommend against contacting the malware’s creators as it could lead to them asking for a ransom and if you pay it, you might find you have lost the money in vain. That is because there is always a possibility the hackers will not bother to send decryption tools even if they promise or guarantee it. Therefore, if you do not like the idea of being tricked, we would advise erasing Scarab-Bin Ransomware with the instructions located at the end of the article or a legitimate antimalware tool. Read more »

Gollum Ransomware, also known as Bitshifter Ransomware, is a malicious application that locks files on victims’ computers. It is a typical ransomware infection that has been designed to encrypt data. There is only one thing that distinguishes it from other ransomware-type infections – it has been observed that it might also try to steal cryptocurrency wallets and some other personal information. In other words, it makes files unusable and, on top of that, it works as an info-stealer. If you have opened this report because you have encountered this malicious application, make sure you erase it from your system because it might be launched again incidentally and lock all your new files. It will not need your permission to do this. Ransomware infections are one of the nastiest malicious applications that are available on the market, but, luckily, Gollum Ransomware does not seem to be anywhere near sophisticated malicious software, i.e. it does not block system utilities, does not drop a bunch of different components, and it does not make any changes in the Run registry key, so you should be able to delete it from the system manually quite easily. Unfortunately, none of your files will be decrypted. Read more »

AnimusLocker Ransomware is a newly-discovered malicious application you might encounter if you keep your system completely unprotected, i.e. security software is not installed on it. Ransomware infections are one of the nastiest malicious applications available because they target the most valuable user’s asset – personal files. If this infection ever slithers onto your computer, you will find a bunch of files, including your documents, images, and music, completely encrypted. Additionally, the ransomware infection will kill Windows Explorer. The process should restart automatically, but you will need to launch it yourself if it does not revive. Technically, AnimusLocker Ransomware is not sophisticated malware, but it might still cause a lot of problems, so it would be best not to encounter it. As mentioned, you can prevent malicious software from entering your computer by installing a security application. If it is already too late for prevention, i.e. the ransomware infection has infiltrated your computer and locked your files, you must delete this infection as soon as possible so that it could not encrypt your new files. Unfortunately, you will not unlock your files even if you delete the ransomware infection fully. Most probably, you could not find a free decryptor either. Read more »

Patagonia92@tutanota.com Ransomware is a malicious file-encrypting program that employs a secure cryptosystem called RSA to lock all of their victims’ personal files. The worst part is the malware is set to restart with the operating system so if the user turns the computer off and then on again the threat might start encrypting his files once more. In which case, data that you might have added or created after the computer got infected would be damaged as well. Because of this, our researchers at Anti-spyware-101.com urge users to remove Patagonia92@tutanota.com Ransomware before it ruins more of their files. The malware can be eliminated manually and if you have a look at the instructions available below you can learn how to get rid of it. As for learning more about the threat you could review our full text. Read more »