Monthly Archives: December 2017 - Page 9

Originally, Crimson RAT is a publicly available, free Remote Administration Tool (RAT), which can be altered and used for malicious purposes by cyber criminals. We could say metaphysically that this tool is like a knife; it can be very useful when used for what it was designed for but can also be very dangerous in the wrong hands. This is exactly what happened to this application and cyber villains may use it for all kinds of malicious tasks operating on your system. Our malware specialists at anti-spyware-101.com say this the spin-off tools of this program are indeed Trojans that can infiltrate your computer without your knowledge and run different malicious operations behind your back. Therefore, we strongly recommend that you remove Crimson RAT from your PC and make sure that there is no other single threat present as well. Please continue reading our report if you would like to learn how to protect your PC against similar dangerous threats. Read more »

Wannapeace Ransomware is one more devious application that you must delete if it is ever found up and running on your operating system. Our malware experts urge you to do so without any hesitation since this malicious piece of software functions in an extremely malicious manner. Like any other ransomware program, the one in question can easily encrypt a vast amount of your data without any notification or authorization. It is not hard to imagine that having such application could lead to disastrous outcomes, to put it mildly. To help you understand how this malicious piece of software works we present findings of your researchers in this article. Also, you will find virtual security tips, which will help you maintain a fully secure operating system at all times. Besides all such information, we include an in-depth removal guide, which you should use to delete Wannapeace Ransomware once and for all. Read more »

Cyber Police Ransomware shows a message claiming it enciphered user’s data because of his illegal activities. Our researchers at Anti-spyware-101.com say it is nothing more than a harmful program developed to extort money from inexperienced users. Consequently, if you come across it, we advise you to consider all options carefully. The malicious program’s creators could promise to deliver decryption tools once you pay the requested ransom, but there are no guarantees these hackers will keep up with such promises. To put it simply, there is a chance you might lose not just your files, but also some of your money. For users who would like to avoid such a scenario, we recommend erasing Cyber Police Ransomware with the instructions located below this text. As for those who wish to learn more about the malware first; we encourage reading the rest of the article. Read more »

Wannasmile Ransomware belongs to the group of crypto-malware, so it will encrypt your entire hard drive if it ever infiltrates your computer. This threat will affect your .jpeg, .docx, .rtf, .xlsx, .ppt, .mrw, .odb, .ods, .p7b, .wmv, .zip, .7z, .mp4, .avi, and a bunch of other files. No doubt the file you are trying to open belongs to the group of encrypted data if you cannot open it, and you see a new extension .WSmile appended to it. You will be told that you could unlock your files with the special decryptor after you purchase it from cyber criminals, but you should not fall for this. Nobody knows whether cyber criminals behind this infection will still be willing to share the decryptor with you after receiving a ransom you send to them, so we recommend that you do not spend your money on it. Instead, you should delete the ransomware infection from your computer right away. If you leave this infection active on your computer, it might encrypt even more files on your system because it has a point of execution and starts working automatically on system startup. That is, it scans the system with every new launch and encrypts those files that are not locked yet. We will talk about its removal in detail in the last paragraph. Read more »

If all pictures, videos, songs, slides, and other files that belong to you have been marked by the .nightmare extension, Foxy Ransomware must have infiltrated your computer. It is another HiddenTear-based ransomware infection, so our specialists have not found it surprising at all that it acts the way it does, i.e. goes to lock files on compromised machines the first thing. All ransomware infections act similarly – they make it impossible to access files so that cyber criminals behind them could have a chance to obtain easy money from users. At the time of writing, Foxy Ransomware was not a very prevalent threat if compared to similar ransomware-type infections, but it does not mean that it cannot become popular over time, so you should take all security measures to prevent it from entering your system. If it is already too late for prevention, i.e. you have already encountered this threat, you should delete it from your computer right away because the ransomware infection creates a copy of itself in %TEMP%, and you might accidentally launch it again one day. In this case, your files will become encrypted again. Once all components of Foxy Ransomware are erased from your system, you could restore your files. Unfortunately, free decryption software does not exist. Cyber criminals will not give you the special decryption tool to you for free either, so the only thing you can do is to restore these encrypted personal files from a backup. Read more »

Finding Relec Ransomware on your system may not cause severe devastation yet since this ransomware infection is not fully operational at the moment. As a matter of fact, our malware experts at anti-spyware-101.com say that this is an open-source educational project just like Hidden Tear Ransomware was originally. This ransomware program was coded in C++ and does have the capability of encrypting your files; however, this version does not do so. So if you have been infected with this sample, chances are your files have not been affected by this ransomware infection. Learning from the Hidden Tear spin-off cases, we can surely say that there will be more and more variants emerging as hackers and wannabes can both use it as a good base for their malicious attacks. We recommend that you regularly save a backup of your important files to cloud storage or a removable drive so that you can use these clean copies if the nightmare hits you. We advise you to remove Relec Ransomware even if right now it may not be as dangerous as it may soon become. Read more »