Monthly Archives: December 2017 - Page 6

Ranion 1.07 Ransomware is claimed to be an educational project but it appears to be a complete lie. Our malware specialists at anti-spyware-101.com say that this is indeed a RaaS (Ransomware as a Service) sold on the darknet. This also means unfortunately that more and more variants may surface with smaller or bigger differences according to the particular buyers' choices and configurations. If this ransomware, any of its variants, managed to infiltrate your system, you can be sure that your most important files will be encrypted. Causing irrevocable damage is not the main goal here; extorting money from the victims for the decryption key is why this ransomware really exists. Although you may believe that paying the ransom fee will free your files, we beg to differ. As a matter of fact, it is always very risky to pay due to the fact that cyber criminals would rather disappear than send you the decryption key. We recommend that you remove Ranion 1.07 Ransomware immediately after you realize that you have been hit. Read more »

WantMoney Ransomware is a malicious threat that replaces the victim’s desktop image with a picture of a skull made from dollar signs and placed on a red background. Besides the skull, the new wallpaper might show a ransom note written both in Chinese and English. In it, the malicious application’s creators should ask their victims to transfer a particular amount of money into their account. In exchange, they offer a decryption key with which it is said the user would be able to restore all malware’s affected files. As you see, the infection locks user’s data with a secure cryptosystem to make them unusable. However, we would advise you not to trust the hackers as they could trick you. Instead, we recommend looking for another way to decrypt encrypted files. Those who do not wish to risk their savings should simply get rid of WantMoney Ransomware. To learn how to remove it you could follow the instructions located below the text, but if you want to get to know this threat better too, you should read the article first. Read more »

ABC Ransomware is a new variant of Globeimposter Ransomware. Yes, it slightly differs from the original threat, but it still acts as a typical ransomware infection. If it ever slithers onto your computer, you will soon find your files encrypted. This infection locks music, videos, pictures, and other valuable files not without reason. The only purpose ransomware infections are set to perform the encryption of files is to make it easier for crooks to obtain money from users. If you already see .astra at the end of the majority of your files, it means that your data has already been locked. Luckily, ABC Ransomware does not encrypt any system files, so your operating system will continue working normally after its successful entrance. Are you reading this article because you have already encountered ABC Ransomware? If the answer to this question is positive, your files must have been encrypted too. You will be asked to send money to be able to decrypt them, but you should not do that because the chances are high that you could still not unlock them. If you are not going to pay money to crooks, it does not mean you can let this ransomware infection stay active on your computer. If you do not remove its components from your system, you might launch this infection again, and, of course, it will not miss an opportunity to lock your new files when this happens. The last paragraph contains everything you need to know about the removal of this ransomware infection. On top of that, you will find the manual removal guide below this article, so we are sure you will manage to erase it from your computer. Read more »

Hc7 Ransomware is a new threat that can attack your computer and your whole network, and encrypt all important files causing severe devastation. Our malware experts at anti-spyware-101.com say that this threat is not really as new as it seems because it is indeed a new variant of a previous ransomware program called Hc6 Ransomware. This new variant is also coded in the Python programming language and seems very similar to the previous version. However, while Hc6 can be decrypted now using a free tool, this ransomware is still not decryptable, which means that you can easily lose all your files in this malicious attack. Although these attackers offer you the decryption key for a rather high price, you have no guarantee at all that you will actually get it in return. We believe that the only legitimate way to recover your files until a free tool may surface is to use a backup that you may have stored on a removable drive or cloud. But before you would rush to update your encrypted files from a backup, we highly recommend that you remove Hc7 Ransomware from your computer. Read more »

Rastakhiz Ransomware is an underdeveloped infection that might make big waves sometime in the future. Even though some features of this infection do not work properly (at least not in the sample that we worked with), the application can still cripple your system by encrypting your files, so it should be taken seriously. If you have been infected with this program, please remove Rastakhiz Ransomware immediately. It may not be that easy to restore your files because there is no public decryption tool at the moment, but computer security experts maintain that there are ways to get some of your files back. Read more »