Monthly Archives: October 2017 - Page 3

Thtlocker, also spelt THT Locker, is a piece of ransomware that temporarily locks the screen of the PC. The Thtlocker ransomware is not as dangerous as the notorious ransomware infections such as CryptoLocker or WannaCry. The analysis of the Thtlocker threat has shown that the infection is poorly coded in .NET, which is a framework for building different types of software on the Windows operating systems. The Thtlocker Ransomware can be removed manually, but it is highly advisable to implement anti-malware software in order to prevent further malware attacks, which are likely to take place if you keep the OS unprotected. Read more »

Rotor Ransomware may not leave any ransom note on the infected computer, but we have no doubt it is a malicious file-encrypting application designed to take the victim’s files as hostages and extort money from the user. Our researchers at Anti-spyware-101.com say that while the malware does not drop any ransom note, it might mark all encrypted data with a particular extension which should state a specific email address. Probably, the threat’s creators expect users to contact them via such email. However, we do not recommend doing so as there are no guarantees you will get your data back even if you pay what the cyber criminals ask. What we are trying to say is that dealing with such people could result in you losing your savings. Users who would not want to risk it should delete Rotor Ransomware instead, and once it is gone, it should be safe to restore the files from backup. To guide users through the removal process, we will add instructions at the end of the article. Read more »

If your files ever get a new extension .SaherBlueEagleRansomware appended to them, this must be one of the first signs that BlueEagle Ransomware has successfully slithered onto the computer. It might be still in the development phase, but we cannot tell you that it is impossible to encounter it because cyber criminals might already actively distribute it. They have developed this malicious application having the only goal – to extract money from users. All cyber criminals know how hard it is to make users send money to them willingly, so they have programmed this ransomware infection to encrypt their files. If it ever shows up on your computer illegally, this will inevitably result in the loss of personal files. You will be asked to send money to cyber criminals in exchange for the special tool that can unlock your files, but, of course, you should not do that because you might be left without anything. To put it differently, you might still not be able to unlock your encrypted files, and cyber criminals will not return your money. We have only one piece of advice for those users who encounter malicious software trying to obtain money from them – remove the infection you have on your PC right away. In other words, you should not think about how to decrypt your files now. Instead, focus on the BlueEagle Ransomware removal. Read more »

There is a reason why your files have a new .locked extension. The chances are high that a malicious application called The Magic Ransomware has slithered onto your computer successfully if original extensions of your personal files are gone. It does not differ at all from other ransomware infections – it encrypts users’ pictures, documents, videos, and music in order to obtain money from them. Users living in Italy should be the most careful, our security specialists say, because the ransom note this infection drops after the encryption of files is almost all in Italian, which suggests that this ransomware infection targets Italian-speaking users primarily. We are sure your files are locked too if this nasty infection has shown up on your PC illegally. Luckily, it is not that hard to remove it, so, please, go to erase it from your system as soon as possible. Unfortunately, we cannot say the same about the decryption of files. To be frank, we cannot even promise that you could unlock them without the decryption key cyber criminals have. Of course, we do not try to say here that you should go to purchase it from them because nobody knows if they are willing to give it to you. Consequently, you should focus on the removal of The Magic Ransomware mainly. Read more »